last executing test programs: 9.847452974s ago: executing program 0 (id=1565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 9.557105169s ago: executing program 3 (id=1567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {0x0}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4004040) 7.871847697s ago: executing program 3 (id=1570): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.614036042s ago: executing program 0 (id=1572): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.214167468s ago: executing program 2 (id=1573): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$x25(r5, &(0x7f0000000040), 0x12) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r7) 7.204175409s ago: executing program 3 (id=1574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.029960291s ago: executing program 0 (id=1575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4b, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6800c0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0xfffffffffffffe1e, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x0, 0x7, "cab628a7b59d3dc8385390094839f49d"}, @TCA_CT_ACTION={0x6, 0x3, 0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1000000053"], 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x4004004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000000c0)) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffc}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket(0x840000000002, 0x3, 0xf8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', "0200", "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) 6.011501218s ago: executing program 2 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 5.986129369s ago: executing program 3 (id=1577): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x14, 0xce, 0x0, r1}, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 5.91809613s ago: executing program 4 (id=1578): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18}, 0x4000) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) 5.91672791s ago: executing program 2 (id=1579): syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000100090000000000", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 5.666408704s ago: executing program 4 (id=1580): socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) gettid() socket$can_raw(0x1d, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r5, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 5.30904987s ago: executing program 1 (id=1581): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7}, 0xc) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 4.209598919s ago: executing program 1 (id=1582): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 4.14819268s ago: executing program 0 (id=1583): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.065335201s ago: executing program 3 (id=1584): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000080) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cff772e11b4", 0x1d}, {0x0}], 0x2) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4091}, 0x4801) open$dir(&(0x7f0000000080)='./cgroup.net/devices.allow/file0\x00', 0x10000, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x63, 0x82, 0x1e, 0x20, 0xccd, 0x10b6, 0xf6e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xef, 0x1, 0x0, 0x74, 0xc0, 0xda, 0xb5}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000940), 0x0, 0x4000, 0x0, 0x0) 3.932410403s ago: executing program 4 (id=1585): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.846068315s ago: executing program 0 (id=1586): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x82000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000380)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) socketpair(0x18, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_emit_ethernet(0x1c2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 3.782867776s ago: executing program 2 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.726574287s ago: executing program 0 (id=1588): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="2e000300010002", 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df33c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) syz_open_dev$audion(&(0x7f0000000100), 0x8, 0x141400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r2) openat$audio(0xffffff9c, 0x0, 0x0, 0x0) 3.722633027s ago: executing program 4 (id=1589): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x80c4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3be, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000980)={0x0, 0x418}) syz_usb_connect(0x2, 0x24, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) 3.614150609s ago: executing program 2 (id=1590): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.237782665s ago: executing program 1 (id=1591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.133222337s ago: executing program 4 (id=1592): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000480)=""/167, 0xa7}], 0x3, 0x7, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00703cf3dfffffffffffffff08722f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049c2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.892627421s ago: executing program 1 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2ee", 0x8}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4004040) 905.915524ms ago: executing program 4 (id=1594): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x14, 0xce, 0x0, r1}, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 818.291636ms ago: executing program 1 (id=1595): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 164.307657ms ago: executing program 3 (id=1596): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 22.520149ms ago: executing program 1 (id=1597): syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000100090000000000", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 0s ago: executing program 2 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): oop3): Mounting V5 Filesystem [ 153.505869][ T5011] XFS (loop0): Ending clean mount [ 153.513916][ T5011] XFS (loop0): Quotacheck needed: Please wait. [ 153.657386][ T5011] XFS (loop0): Quotacheck: Done. [ 153.739447][ T5013] XFS (loop1): Ending clean mount [ 153.746569][ T5013] XFS (loop1): Quotacheck needed: Please wait. [ 153.817447][ T5013] XFS (loop1): Quotacheck: Done. [ 153.827656][ T5024] XFS (loop3): Ending clean mount [ 153.835708][ T5024] XFS (loop3): Quotacheck needed: Please wait. [ 153.910954][ T5024] XFS (loop3): Quotacheck: Done. [ 155.862338][ T4169] XFS (loop0): Unmounting Filesystem [ 155.886613][ T4175] XFS (loop1): Unmounting Filesystem [ 155.974924][ T4180] XFS (loop3): Unmounting Filesystem [ 158.008686][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 161.569113][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 161.589519][ T5077] loop0: detected capacity change from 0 to 8 [ 162.064145][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 171.628094][ T4210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.164334][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 172.928152][ T4210] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.152326][ T4210] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 173.172097][ T4210] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.181475][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.248536][ T5149] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.817833][ T5167] loop2: detected capacity change from 0 to 32768 [ 173.899799][ T5167] XFS: ikeep mount option is deprecated. [ 174.937660][ T5167] XFS (loop2): Mounting V5 Filesystem [ 175.143471][ T5186] loop4: detected capacity change from 0 to 8 [ 175.176041][ T4253] usb 2-1: USB disconnect, device number 2 [ 175.176476][ T5167] XFS (loop2): Ending clean mount [ 175.222073][ T5167] XFS (loop2): Quotacheck needed: Please wait. [ 175.343899][ T5167] XFS (loop2): Quotacheck: Done. [ 175.645968][ T5190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 176.445862][ T4177] XFS (loop2): Unmounting Filesystem [ 176.718002][ T4661] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 176.958005][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.838271][ T4661] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.883815][ T4661] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.888424][ T21] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 177.914455][ T4661] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.922925][ T21] usb 2-1: config 0 has no interface number 0 [ 178.047975][ T4661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.098287][ T5194] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.278161][ T21] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 178.305426][ T5205] loop2: detected capacity change from 0 to 8 [ 178.322477][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.371401][ T21] usb 2-1: Product: syz [ 178.381532][ T21] usb 2-1: Manufacturer: syz [ 178.391648][ T21] usb 2-1: SerialNumber: syz [ 178.405230][ T21] usb 2-1: config 0 descriptor?? [ 178.426651][ T5207] loop4: detected capacity change from 0 to 1024 [ 178.483495][ T21] usb 2-1: can't set config #0, error -71 [ 178.491923][ T21] usb 2-1: USB disconnect, device number 3 [ 178.791470][ T5207] EXT4-fs (loop4): Ignoring removed orlov option [ 178.800937][ T5207] EXT4-fs (loop4): Ignoring removed nobh option [ 178.807553][ T5207] EXT4-fs (loop4): Ignoring removed bh option [ 178.816481][ T5207] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.067056][ T5211] loop1: detected capacity change from 0 to 32768 [ 179.105818][ T5207] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 179.138588][ T5211] XFS: ikeep mount option is deprecated. [ 179.888899][ T5211] XFS (loop1): Mounting V5 Filesystem [ 179.929110][ T4661] usb 4-1: USB disconnect, device number 2 [ 180.291521][ T5211] XFS (loop1): Ending clean mount [ 180.299321][ T5211] XFS (loop1): Quotacheck needed: Please wait. [ 180.347200][ T5211] XFS (loop1): Quotacheck: Done. [ 180.450819][ T3505] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.794385][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 180.938330][ T3505] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.959725][ T3505] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.145759][ T3505] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.148352][ T5237] autofs4:pid:5237:autofs_fill_super: called with bogus options [ 181.155976][ T3505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.191492][ T5239] loop3: detected capacity change from 0 to 32768 [ 181.228714][ T5226] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.238574][ T5239] XFS: ikeep mount option is deprecated. [ 181.301743][ T5239] XFS (loop3): Mounting V5 Filesystem [ 181.334173][ T4175] XFS (loop1): Unmounting Filesystem [ 181.448070][ T4212] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.514206][ T5239] XFS (loop3): Ending clean mount [ 181.557350][ T5239] XFS (loop3): Quotacheck needed: Please wait. [ 181.717545][ T5239] XFS (loop3): Quotacheck: Done. [ 181.901178][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 182.698307][ T4212] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 182.743548][ T4212] usb 5-1: config 0 has no interface number 0 [ 183.676317][ T5260] netlink: 'syz.1.200': attribute type 12 has an invalid length. [ 183.698227][ T4212] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 183.782207][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.812817][ T4212] usb 5-1: Product: syz [ 183.858156][ T4212] usb 5-1: Manufacturer: syz [ 183.868277][ T4212] usb 5-1: SerialNumber: syz [ 183.892466][ T4212] usb 5-1: config 0 descriptor?? [ 183.924425][ T21] usb 1-1: USB disconnect, device number 6 [ 183.990004][ T4212] usb 5-1: can't set config #0, error -71 [ 184.015936][ T4212] usb 5-1: USB disconnect, device number 3 [ 184.053856][ T4180] XFS (loop3): Unmounting Filesystem [ 184.561808][ T5273] loop4: detected capacity change from 0 to 1024 [ 184.698524][ T5273] EXT4-fs (loop4): Ignoring removed orlov option [ 184.746716][ T5273] EXT4-fs (loop4): Ignoring removed nobh option [ 184.759019][ T5273] EXT4-fs (loop4): Ignoring removed bh option [ 184.765116][ T5273] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.780264][ T5274] loop0: detected capacity change from 0 to 8 [ 185.088933][ T5273] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 186.531136][ T4661] Bluetooth: hci0: command 0x0406 tx timeout [ 186.607979][ T4661] Bluetooth: hci3: command 0x0406 tx timeout [ 186.619455][ T4212] Bluetooth: hci1: command 0x0406 tx timeout [ 186.628827][ T4212] Bluetooth: hci2: command 0x0406 tx timeout [ 186.634884][ T4212] Bluetooth: hci4: command 0x0406 tx timeout [ 186.664685][ T5282] loop3: detected capacity change from 0 to 8 [ 187.032495][ T5293] loop2: detected capacity change from 0 to 32768 [ 187.088740][ T5293] XFS: ikeep mount option is deprecated. [ 187.616387][ T5301] loop3: detected capacity change from 0 to 32768 [ 187.643453][ T5293] XFS (loop2): Mounting V5 Filesystem [ 188.698599][ T5301] XFS: ikeep mount option is deprecated. [ 188.803823][ T5293] XFS (loop2): Ending clean mount [ 188.810969][ T5293] XFS (loop2): Quotacheck needed: Please wait. [ 188.873414][ T5293] XFS (loop2): Quotacheck: Done. [ 188.911441][ T5301] XFS (loop3): Mounting V5 Filesystem [ 189.855433][ T5301] XFS (loop3): Ending clean mount [ 189.862156][ T5301] XFS (loop3): Quotacheck needed: Please wait. [ 189.879388][ T4177] XFS (loop2): Unmounting Filesystem [ 190.094570][ T5301] XFS (loop3): Quotacheck: Done. [ 191.023268][ T4180] XFS (loop3): Unmounting Filesystem [ 191.041555][ T5326] netlink: 'syz.1.217': attribute type 12 has an invalid length. [ 191.671279][ T5332] loop1: detected capacity change from 0 to 32768 [ 191.789348][ T5332] XFS: ikeep mount option is deprecated. [ 192.485887][ T5332] XFS (loop1): Mounting V5 Filesystem [ 193.838684][ T5332] XFS (loop1): Ending clean mount [ 193.847714][ T5332] XFS (loop1): Quotacheck needed: Please wait. [ 194.153263][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160931][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.259586][ T5332] XFS (loop1): Quotacheck: Done. [ 194.285775][ T5361] loop2: detected capacity change from 0 to 8 [ 194.969068][ T4175] XFS (loop1): Unmounting Filesystem [ 195.178292][ T3505] Bluetooth: hci5: command 0x1003 tx timeout [ 195.184480][ T146] Bluetooth: hci5: sending frame failed (-49) [ 195.278043][ T4253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 195.336005][ T5372] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 195.658098][ T4253] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.572148][ T5377] loop3: detected capacity change from 0 to 32768 [ 196.608412][ T5377] XFS: ikeep mount option is deprecated. [ 196.869222][ T5377] XFS (loop3): Mounting V5 Filesystem [ 197.462109][ T5377] XFS (loop3): Ending clean mount [ 197.474504][ T5377] XFS (loop3): Quotacheck needed: Please wait. [ 197.851133][ T5377] XFS (loop3): Quotacheck: Done. [ 197.983558][ T5388] capability: warning: `syz.1.228' uses deprecated v2 capabilities in a way that may be insecure [ 198.586352][ T4253] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.077733][ T4253] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.087490][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.098934][ T4661] Bluetooth: hci5: command 0x1001 tx timeout [ 200.111949][ T13] Bluetooth: hci6: command 0x1003 tx timeout [ 200.759790][ T4170] Bluetooth: hci5: sending frame failed (-49) [ 200.762341][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 200.780042][ T4253] usb 5-1: can't set config #27, error -71 [ 200.889579][ T4253] usb 5-1: USB disconnect, device number 4 [ 200.926806][ T4180] XFS (loop3): Unmounting Filesystem [ 200.948512][ T5401] loop1: detected capacity change from 0 to 1024 [ 201.100164][ T5398] loop1: detected capacity change from 0 to 128 [ 201.125109][ T5398] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.540007][ T5406] loop1: detected capacity change from 0 to 32768 [ 201.578568][ T5406] XFS: ikeep mount option is deprecated. [ 201.643990][ T5406] XFS (loop1): Mounting V5 Filesystem [ 201.706023][ T5406] XFS (loop1): Ending clean mount [ 201.715705][ T4253] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.727740][ T5406] XFS (loop1): Quotacheck needed: Please wait. [ 201.769970][ T5406] XFS (loop1): Quotacheck: Done. [ 202.128091][ T4253] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.323729][ T4253] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.334185][ T4253] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.344440][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.389802][ T5404] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.537383][ T4175] XFS (loop1): Unmounting Filesystem [ 202.646719][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 202.778134][ T5396] Bluetooth: hci6: command 0x1001 tx timeout [ 202.778183][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 202.784259][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 203.108158][ T4253] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.368021][ T4253] usb 4-1: Using ep0 maxpacket: 32 [ 203.538038][ T4253] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 203.546289][ T4253] usb 4-1: config 0 has no interface number 0 [ 203.553124][ T4253] usb 4-1: config 0 interface 12 has no altsetting 0 [ 203.744971][ T4253] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 203.754440][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.762887][ T4253] usb 4-1: Product: syz [ 203.767096][ T4253] usb 4-1: Manufacturer: syz [ 203.772379][ T4253] usb 4-1: SerialNumber: syz [ 203.783048][ T4253] usb 4-1: config 0 descriptor?? [ 203.890453][ T5428] netlink: 'syz.1.241': attribute type 12 has an invalid length. [ 203.964394][ T1107] usb 5-1: USB disconnect, device number 5 [ 204.129921][ T5430] loop1: detected capacity change from 0 to 32768 [ 204.179241][ T5430] XFS: ikeep mount option is deprecated. [ 204.261713][ T5430] XFS (loop1): Mounting V5 Filesystem [ 204.318155][ T5430] XFS (loop1): Ending clean mount [ 204.325321][ T5430] XFS (loop1): Quotacheck needed: Please wait. [ 204.380335][ T5430] XFS (loop1): Quotacheck: Done. [ 204.578043][ T4253] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 204.973256][ T4253] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 204.980887][ T4253] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 204.988759][ T4253] f81534: probe of 4-1:0.12 failed with error -71 [ 205.003329][ T4253] usb 4-1: USB disconnect, device number 3 [ 205.012875][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 205.237556][ T5442] loop0: detected capacity change from 0 to 32768 [ 205.298617][ T5442] XFS: ikeep mount option is deprecated. [ 205.491588][ T4175] XFS (loop1): Unmounting Filesystem [ 205.592499][ T5442] XFS (loop0): Mounting V5 Filesystem [ 206.297000][ T5442] XFS (loop0): Ending clean mount [ 206.306330][ T5442] XFS (loop0): Quotacheck needed: Please wait. [ 206.318117][ T4253] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 206.321384][ T5458] loop4: detected capacity change from 0 to 1024 [ 206.386999][ T5442] XFS (loop0): Quotacheck: Done. [ 206.646568][ T5458] EXT4-fs (loop4): Ignoring removed orlov option [ 206.798176][ T4253] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.085832][ T5458] EXT4-fs (loop4): Ignoring removed nobh option [ 208.147052][ T5458] EXT4-fs (loop4): Ignoring removed bh option [ 208.296715][ T5458] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.627789][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 209.150490][ T4253] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 209.160499][ T4253] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.169599][ T4253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.208074][ T4253] usb 4-1: can't set config #27, error -71 [ 209.215249][ T4253] usb 4-1: USB disconnect, device number 4 [ 210.285008][ T4169] XFS (loop0): Unmounting Filesystem [ 210.566409][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 210.740353][ T5473] loop2: detected capacity change from 0 to 32768 [ 210.789023][ T5473] XFS: ikeep mount option is deprecated. [ 210.984127][ T5473] XFS (loop2): Mounting V5 Filesystem [ 211.127994][ T5396] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.185222][ T5473] XFS (loop2): Ending clean mount [ 211.193088][ T5473] XFS (loop2): Quotacheck needed: Please wait. [ 211.344223][ T5473] XFS (loop2): Quotacheck: Done. [ 211.484136][ T5491] loop3: detected capacity change from 0 to 32768 [ 211.488115][ T5396] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 211.533447][ T5491] XFS: ikeep mount option is deprecated. [ 211.816010][ T5491] XFS (loop3): Mounting V5 Filesystem [ 212.033246][ T5396] usb 2-1: config 0 has no interface number 0 [ 212.122953][ T5491] XFS (loop3): Ending clean mount [ 212.130280][ T5491] XFS (loop3): Quotacheck needed: Please wait. [ 212.224341][ T5491] XFS (loop3): Quotacheck: Done. [ 212.350963][ T4177] XFS (loop2): Unmounting Filesystem [ 212.358284][ T5396] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 212.420762][ T5396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.509587][ T5396] usb 2-1: Product: syz [ 212.556668][ T5396] usb 2-1: Manufacturer: syz [ 212.612834][ T5396] usb 2-1: SerialNumber: syz [ 212.723724][ T5396] usb 2-1: config 0 descriptor?? [ 212.816261][ T5396] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 212.928030][ T5396] ems_usb: probe of 2-1:0.204 failed with error -22 [ 212.971900][ T4180] XFS (loop3): Unmounting Filesystem [ 214.287789][ T4253] usb 2-1: USB disconnect, device number 4 [ 214.555773][ T5513] loop1: detected capacity change from 0 to 32768 [ 214.608598][ T5513] XFS: ikeep mount option is deprecated. [ 214.744346][ T5513] XFS (loop1): Mounting V5 Filesystem [ 214.968131][ T5513] XFS (loop1): Ending clean mount [ 214.975354][ T5513] XFS (loop1): Quotacheck needed: Please wait. [ 215.070205][ T5528] loop0: detected capacity change from 0 to 32768 [ 215.091340][ T5513] XFS (loop1): Quotacheck: Done. [ 215.118493][ T5528] XFS: ikeep mount option is deprecated. [ 215.321886][ T5528] XFS (loop0): Mounting V5 Filesystem [ 215.693681][ T5538] loop3: detected capacity change from 0 to 1024 [ 215.757936][ T5528] XFS (loop0): Ending clean mount [ 215.764562][ T5528] XFS (loop0): Quotacheck needed: Please wait. [ 215.813984][ T5528] XFS (loop0): Quotacheck: Done. [ 215.836170][ T4175] XFS (loop1): Unmounting Filesystem [ 215.836587][ T5538] EXT4-fs (loop3): Ignoring removed orlov option [ 215.864384][ T5538] EXT4-fs (loop3): Ignoring removed nobh option [ 215.918058][ T5538] EXT4-fs (loop3): Ignoring removed bh option [ 215.961301][ T5538] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.335319][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 216.592229][ T5551] loop4: detected capacity change from 0 to 32768 [ 216.648920][ T5551] XFS: ikeep mount option is deprecated. [ 216.761214][ T4169] XFS (loop0): Unmounting Filesystem [ 216.883539][ T5551] XFS (loop4): Mounting V5 Filesystem [ 217.078092][ T5551] XFS (loop4): Ending clean mount [ 217.085875][ T5551] XFS (loop4): Quotacheck needed: Please wait. [ 217.146012][ T5551] XFS (loop4): Quotacheck: Done. [ 217.429250][ T5568] netlink: 56 bytes leftover after parsing attributes in process `syz.2.266'. [ 218.993523][ T4168] XFS (loop4): Unmounting Filesystem [ 226.441316][ T5634] netlink: 56 bytes leftover after parsing attributes in process `syz.4.282'. [ 226.968058][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 227.297966][ T4227] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 227.538686][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.676750][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.254062][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.294096][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.481612][ T5636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.848526][ T4227] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 228.911197][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.058104][ T4227] usb 2-1: Product: syz [ 229.132462][ T4227] usb 2-1: Manufacturer: syz [ 229.204529][ T4227] usb 2-1: SerialNumber: syz [ 229.411985][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 229.437802][ T4227] usb 2-1: config 0 descriptor?? [ 229.748833][ T4227] usb 2-1: selecting invalid altsetting 3 [ 229.754945][ T4227] comedi comedi0: could not set alternate setting 3 in high speed [ 229.823062][ T5641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.285'. [ 230.140068][ T5671] loop0: detected capacity change from 0 to 32768 [ 230.394411][ T4227] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 230.439421][ T5671] XFS: ikeep mount option is deprecated. [ 230.444628][ T4227] usbdux: probe of 2-1:0.0 failed with error -22 [ 230.720045][ T5671] XFS (loop0): Mounting V5 Filesystem [ 231.070894][ T21] usb 4-1: USB disconnect, device number 5 [ 231.241329][ T5671] XFS (loop0): Ending clean mount [ 231.248825][ T5671] XFS (loop0): Quotacheck needed: Please wait. [ 231.363205][ T5671] XFS (loop0): Quotacheck: Done. [ 231.765720][ T5687] loop3: detected capacity change from 0 to 32768 [ 231.842381][ T4210] usb 2-1: USB disconnect, device number 5 [ 231.849982][ T5687] XFS: ikeep mount option is deprecated. [ 232.132867][ T5687] XFS (loop3): Mounting V5 Filesystem [ 232.392839][ T5702] Zero length message leads to an empty skb [ 233.549486][ T5687] XFS (loop3): Ending clean mount [ 233.565607][ T5687] XFS (loop3): Quotacheck needed: Please wait. [ 233.631651][ T5687] XFS (loop3): Quotacheck: Done. [ 233.648173][ T4210] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 233.737224][ T4169] XFS (loop0): Unmounting Filesystem [ 234.148308][ T4210] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.232626][ T4210] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.243650][ T4210] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.253087][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.314965][ T5692] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 234.482824][ T4180] XFS (loop3): Unmounting Filesystem [ 235.506475][ T5727] netlink: 56 bytes leftover after parsing attributes in process `syz.0.298'. [ 235.812860][ T5726] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 235.875668][ T5726] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 236.021583][ T4227] usb 3-1: USB disconnect, device number 2 [ 236.451860][ T5740] loop4: detected capacity change from 0 to 8 [ 237.056817][ T5747] loop0: detected capacity change from 0 to 8 [ 237.191493][ T5749] loop2: detected capacity change from 0 to 1024 [ 237.284220][ T5749] EXT4-fs (loop2): Ignoring removed orlov option [ 237.328041][ T5749] EXT4-fs (loop2): Ignoring removed nobh option [ 237.334344][ T5749] EXT4-fs (loop2): Ignoring removed bh option [ 237.398336][ T5749] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.604912][ T5749] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 238.938279][ T5396] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 239.338091][ T5396] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.388059][ T5396] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.428003][ T5396] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.437117][ T5396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.508546][ T5766] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 239.752872][ T5774] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 239.768021][ T5396] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 239.784611][ T5774] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 240.330858][ T5786] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 240.339281][ T5396] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 240.359107][ T5396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.367329][ T5396] usb 4-1: Product: syz [ 240.375486][ T5786] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 240.385889][ T5396] usb 4-1: Manufacturer: syz [ 240.394793][ T5396] usb 4-1: SerialNumber: syz [ 240.424139][ T5396] usb 4-1: config 0 descriptor?? [ 240.472133][ T5396] usb 4-1: selecting invalid altsetting 3 [ 240.497978][ T5396] comedi comedi0: could not set alternate setting 3 in high speed [ 240.514641][ T5396] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 240.534629][ T5396] usbdux: probe of 4-1:0.0 failed with error -22 [ 240.547724][ T5791] loop1: detected capacity change from 0 to 1024 [ 240.703662][ T5769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.313'. [ 240.907895][ T5396] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 240.926647][ T5791] EXT4-fs (loop1): Ignoring removed orlov option [ 240.933457][ T5791] EXT4-fs (loop1): Ignoring removed nobh option [ 241.006786][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 241.343323][ T5791] EXT4-fs (loop1): Ignoring removed bh option [ 241.499020][ T5396] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 241.589207][ T5396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.597516][ T5396] usb 5-1: Product: syz [ 241.599710][ T4159] usb 3-1: USB disconnect, device number 3 [ 241.602394][ T5396] usb 5-1: Manufacturer: syz [ 241.612675][ T5396] usb 5-1: SerialNumber: syz [ 241.625768][ T5791] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.774740][ T5396] usb 5-1: config 0 descriptor?? [ 241.782773][ T5791] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 241.847549][ T5396] usb 5-1: selecting invalid altsetting 3 [ 241.860586][ T5396] comedi comedi0: could not set alternate setting 3 in high speed [ 241.882306][ T5396] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 241.917620][ T5396] usbdux: probe of 5-1:0.0 failed with error -22 [ 242.137434][ T5396] usb 4-1: USB disconnect, device number 6 [ 243.606067][ T4427] Bluetooth: hci5: Frame reassembly failed (-84) [ 245.843541][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 245.937780][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 246.327973][ T21] usb 5-1: USB disconnect, device number 6 [ 247.978186][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 247.990432][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 248.767142][ T5853] loop0: detected capacity change from 0 to 2048 [ 248.864919][ T5853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.013919][ T5854] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 249.031962][ T5854] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 249.032715][ T5858] loop2: detected capacity change from 0 to 1024 [ 249.188265][ T5858] EXT4-fs (loop2): Ignoring removed orlov option [ 249.195095][ T5858] EXT4-fs (loop2): Ignoring removed nobh option [ 249.222164][ T5858] EXT4-fs (loop2): Ignoring removed bh option [ 249.259546][ T5858] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.346226][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 250.220851][ T4210] Bluetooth: hci5: command 0x1009 tx timeout [ 251.172142][ T5884] autofs4:pid:5884:autofs_fill_super: called with bogus options [ 251.408121][ T5893] loop1: detected capacity change from 0 to 8 [ 251.758666][ T5396] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 252.148761][ T5396] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.176155][ T5396] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.187442][ T5396] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.204911][ T5396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.248349][ T5896] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 255.317505][ T13] usb 5-1: USB disconnect, device number 7 [ 255.476547][ T5607] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.648056][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.654435][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.631741][ T5953] loop0: detected capacity change from 0 to 2048 [ 256.700340][ T5953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.560070][ T4210] Bluetooth: hci5: command 0x1003 tx timeout [ 257.696051][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 259.765431][ T4210] Bluetooth: hci5: command 0x1001 tx timeout [ 259.772101][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 259.789073][ T5983] netlink: 56 bytes leftover after parsing attributes in process `syz.4.371'. [ 261.838602][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 264.704559][ T5396] Bluetooth: hci6: command 0x1003 tx timeout [ 264.704798][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 266.399653][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 266.458989][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.664986][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.710598][ T6038] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 266.724692][ T6038] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 266.726514][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 266.778006][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 266.784287][ T146] Bluetooth: hci6: sending frame failed (-49) [ 266.828223][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.054847][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.330978][ T4278] Bluetooth: hci5: Frame reassembly failed (-84) [ 267.677311][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 267.756423][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 269.911601][ T21] Bluetooth: hci6: command 0x1009 tx timeout [ 270.269776][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 270.276089][ T4170] Bluetooth: hci5: sending frame failed (-49) [ 270.548059][ T5396] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 271.078811][ T5396] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 271.103324][ T5396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.155314][ T5396] usb 4-1: Product: syz [ 271.180013][ T5396] usb 4-1: Manufacturer: syz [ 271.206933][ T5396] usb 4-1: SerialNumber: syz [ 271.284003][ T5396] usb 4-1: config 0 descriptor?? [ 271.400966][ T5396] usb 4-1: selecting invalid altsetting 3 [ 271.432549][ T5396] comedi comedi0: could not set alternate setting 3 in high speed [ 271.482771][ T5396] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 271.578707][ T5396] usbdux: probe of 4-1:0.0 failed with error -22 [ 271.691691][ T5396] usb 4-1: USB disconnect, device number 7 [ 271.889554][ T1107] Bluetooth: hci7: command 0x1003 tx timeout [ 271.896948][ T4170] Bluetooth: hci7: sending frame failed (-49) [ 272.297922][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 272.305181][ T4170] Bluetooth: hci5: sending frame failed (-49) [ 273.287939][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 273.658204][ T1107] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.698870][ T1107] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.711788][ T1107] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.721946][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.758294][ T6077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.956741][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 273.978062][ T1107] Bluetooth: hci7: command 0x1001 tx timeout [ 273.984265][ T4174] Bluetooth: hci7: sending frame failed (-49) [ 274.014006][ T5396] usb 5-1: USB disconnect, device number 8 [ 274.268254][ T4253] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 274.355178][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 274.378059][ T4209] Bluetooth: hci5: command 0x1009 tx timeout [ 274.658294][ T4253] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.669539][ T4253] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.679628][ T4253] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 274.689485][ T4253] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.698735][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.820940][ T4253] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 274.873109][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.876059][ T5396] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 275.018237][ T4209] usb 3-1: USB disconnect, device number 4 [ 275.508072][ T5396] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 275.517183][ T5396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.527384][ T5396] usb 4-1: Product: syz [ 275.534801][ T5396] usb 4-1: Manufacturer: syz [ 275.539803][ T5396] usb 4-1: SerialNumber: syz [ 275.577171][ T5396] usb 4-1: config 0 descriptor?? [ 275.623123][ T5396] usb 4-1: selecting invalid altsetting 3 [ 275.644740][ T5396] comedi comedi0: could not set alternate setting 3 in high speed [ 275.652740][ T5396] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 275.664952][ T5396] usbdux: probe of 4-1:0.0 failed with error -22 [ 275.910194][ T4209] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 276.008009][ T5396] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 276.059524][ T1107] Bluetooth: hci7: command 0x1009 tx timeout [ 276.138116][ T4209] usb 5-1: device descriptor read/64, error -71 [ 276.427979][ T4209] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.538059][ T5396] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 276.547232][ T5396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.559594][ T5396] usb 3-1: Product: syz [ 276.563784][ T5396] usb 3-1: Manufacturer: syz [ 276.570297][ T5396] usb 3-1: SerialNumber: syz [ 276.586444][ T5396] usb 3-1: config 0 descriptor?? [ 276.627950][ T4209] usb 5-1: device descriptor read/64, error -71 [ 276.635178][ T5396] usb 3-1: selecting invalid altsetting 3 [ 276.643546][ T5396] comedi comedi0: could not set alternate setting 3 in high speed [ 276.651522][ T5396] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 276.664914][ T5396] usbdux: probe of 3-1:0.0 failed with error -22 [ 276.758615][ T4209] usb usb5-port1: attempt power cycle [ 277.208031][ T4209] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.318195][ T4209] usb 5-1: device descriptor read/8, error -71 [ 277.520933][ T1107] usb 4-1: USB disconnect, device number 8 [ 277.593010][ T6127] overlayfs: missing 'workdir' [ 277.607928][ T4209] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.712559][ T4209] usb 5-1: device descriptor read/8, error -71 [ 277.863700][ T4209] usb usb5-port1: unable to enumerate USB device [ 278.796868][ T5396] usb 3-1: USB disconnect, device number 5 [ 279.021688][ T6138] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 279.037005][ T6138] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 279.047967][ T4209] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 279.286546][ T6151] loop4: detected capacity change from 0 to 512 [ 279.328247][ T6151] EXT4-fs (loop4): Ignoring removed orlov option [ 279.369795][ T6151] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.421: casefold flag without casefold feature [ 279.378070][ T5396] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.417404][ T6151] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.421: couldn't read orphan inode 15 (err -117) [ 279.456453][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 279.688357][ T4209] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 279.720825][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.748238][ T4209] usb 1-1: Product: syz [ 279.766456][ T4209] usb 1-1: Manufacturer: syz [ 279.782539][ T4209] usb 1-1: SerialNumber: syz [ 279.798254][ T5396] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 279.805829][ T4209] usb 1-1: config 0 descriptor?? [ 279.811862][ T5396] usb 3-1: config 0 has no interface number 0 [ 279.892099][ T4209] usb 1-1: selecting invalid altsetting 3 [ 279.909248][ T4209] comedi comedi0: could not set alternate setting 3 in high speed [ 279.935527][ T4209] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 279.955092][ T4209] usbdux: probe of 1-1:0.0 failed with error -22 [ 279.998046][ T5396] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 280.026033][ T5396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.047959][ T5396] usb 3-1: Product: syz [ 280.078046][ T5396] usb 3-1: Manufacturer: syz [ 280.082783][ T5396] usb 3-1: SerialNumber: syz [ 280.119333][ T5396] usb 3-1: config 0 descriptor?? [ 280.159898][ T5396] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 280.185070][ T5396] ems_usb: probe of 3-1:0.204 failed with error -22 [ 280.507197][ T6168] loop3: detected capacity change from 0 to 512 [ 280.574712][ T6168] EXT4-fs (loop3): Ignoring removed orlov option [ 280.595697][ T6168] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.426: casefold flag without casefold feature [ 280.618071][ T6168] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.426: couldn't read orphan inode 15 (err -117) [ 280.638608][ T6168] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 281.172675][ T4227] usb 3-1: USB disconnect, device number 6 [ 281.350606][ T4352] Bluetooth: hci5: Frame reassembly failed (-84) [ 282.670130][ T5396] usb 1-1: USB disconnect, device number 7 [ 283.417983][ T5396] Bluetooth: hci5: command 0x1003 tx timeout [ 283.425294][ T146] Bluetooth: hci5: sending frame failed (-49) [ 284.024723][ T6181] loop1: detected capacity change from 0 to 512 [ 284.233928][ T6181] EXT4-fs (loop1): Ignoring removed orlov option [ 284.436516][ T6181] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.430: casefold flag without casefold feature [ 284.531212][ T6183] loop0: detected capacity change from 0 to 2048 [ 284.625440][ T6181] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.430: couldn't read orphan inode 15 (err -117) [ 284.838177][ T6181] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 284.943344][ T6183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.228122][ T6189] loop3: detected capacity change from 0 to 512 [ 285.282356][ T6191] overlayfs: failed to resolve './file0': -2 [ 285.324225][ T6189] EXT4-fs (loop3): Ignoring removed orlov option [ 285.375236][ T6189] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.433: casefold flag without casefold feature [ 285.425012][ T6189] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.433: couldn't read orphan inode 15 (err -117) [ 285.460868][ T6189] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 285.498601][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 285.522696][ T6196] loop1: detected capacity change from 0 to 512 [ 285.530331][ T146] Bluetooth: hci5: sending frame failed (-49) [ 285.538211][ T5396] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 285.602245][ T6196] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 286.038089][ T5396] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 286.047938][ T5396] usb 3-1: config 0 has no interface number 0 [ 286.208141][ T5396] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 286.227647][ T5396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.237849][ T5396] usb 3-1: Product: syz [ 286.242050][ T5396] usb 3-1: Manufacturer: syz [ 286.258115][ T5396] usb 3-1: SerialNumber: syz [ 286.274863][ T5396] usb 3-1: config 0 descriptor?? [ 286.319641][ T5396] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 286.340577][ T5396] ems_usb: probe of 3-1:0.204 failed with error -22 [ 286.948622][ T6218] loop1: detected capacity change from 0 to 2048 [ 286.960641][ T6220] loop3: detected capacity change from 0 to 2048 [ 287.024255][ T6220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.051405][ T6218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.584253][ T4207] Bluetooth: hci5: command 0x1009 tx timeout [ 287.709294][ T4207] usb 3-1: USB disconnect, device number 7 [ 287.866959][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 289.614692][ T6230] loop3: detected capacity change from 0 to 1024 [ 289.795517][ T6230] EXT4-fs (loop3): Ignoring removed orlov option [ 289.871856][ T6231] overlayfs: failed to resolve './file0': -2 [ 289.872223][ T6234] loop1: detected capacity change from 0 to 512 [ 289.898209][ T13] Bluetooth: hci6: command 0x1003 tx timeout [ 289.904423][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 289.937160][ T6230] EXT4-fs (loop3): Ignoring removed nobh option [ 290.008405][ T6230] EXT4-fs (loop3): Ignoring removed bh option [ 290.110494][ T6230] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.190477][ T6234] EXT4-fs (loop1): Ignoring removed orlov option [ 290.393689][ T6234] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.448: casefold flag without casefold feature [ 290.416871][ T6230] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 290.581799][ T6234] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 290.725338][ T6234] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 291.982048][ T4661] Bluetooth: hci6: command 0x1001 tx timeout [ 292.008035][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 294.064810][ T4207] Bluetooth: hci6: command 0x1009 tx timeout [ 294.130059][ T5396] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 294.372336][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 294.533684][ T5396] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 294.542117][ T5396] usb 3-1: config 0 has no interface number 0 [ 294.728049][ T5396] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 294.737243][ T5396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.747474][ T5396] usb 3-1: Product: syz [ 294.752042][ T5396] usb 3-1: Manufacturer: syz [ 294.756671][ T5396] usb 3-1: SerialNumber: syz [ 294.764832][ T5396] usb 3-1: config 0 descriptor?? [ 294.819025][ T5396] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 294.833820][ T5396] ems_usb: probe of 3-1:0.204 failed with error -22 [ 294.988370][ T5396] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 295.143610][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 295.349021][ T5396] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.374855][ T5396] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.415183][ T5396] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 295.459697][ T5396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.560339][ T6308] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 296.226920][ T5396] usb 3-1: USB disconnect, device number 8 [ 296.876982][ T5396] usb 5-1: USB disconnect, device number 13 [ 297.202330][ T4661] Bluetooth: hci5: command 0x1003 tx timeout [ 297.212249][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 298.148172][ T4207] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 298.528585][ T4207] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 298.569458][ T4207] usb 3-1: config 0 has no interface number 0 [ 298.828606][ T4207] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 298.874978][ T4207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.990310][ T4207] usb 3-1: Product: syz [ 299.055383][ T4207] usb 3-1: Manufacturer: syz [ 299.069167][ T4207] usb 3-1: SerialNumber: syz [ 299.075744][ T4207] usb 3-1: config 0 descriptor?? [ 299.129780][ T4207] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 299.161188][ T4207] ems_usb: probe of 3-1:0.204 failed with error -22 [ 299.258004][ T4661] Bluetooth: hci5: command 0x1001 tx timeout [ 299.268998][ T146] Bluetooth: hci5: sending frame failed (-49) [ 299.327946][ T4210] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 299.517967][ T4207] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 299.988519][ T4210] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 299.997621][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.005719][ T4210] usb 2-1: Product: syz [ 300.009946][ T4210] usb 2-1: Manufacturer: syz [ 300.014556][ T4210] usb 2-1: SerialNumber: syz [ 300.023457][ T4210] usb 2-1: config 0 descriptor?? [ 300.048085][ T4207] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 300.057448][ T4207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.065671][ T4207] usb 1-1: Product: syz [ 300.070058][ T4207] usb 1-1: Manufacturer: syz [ 300.074652][ T4207] usb 1-1: SerialNumber: syz [ 300.087409][ T4207] usb 1-1: config 0 descriptor?? [ 300.090005][ T4210] usb 2-1: selecting invalid altsetting 3 [ 300.102265][ T4210] comedi comedi0: could not set alternate setting 3 in high speed [ 300.110310][ T4210] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 300.124802][ T4210] usbdux: probe of 2-1:0.0 failed with error -22 [ 300.150451][ T4207] usb 1-1: selecting invalid altsetting 3 [ 300.163672][ T4207] comedi comedi0: could not set alternate setting 3 in high speed [ 300.178187][ T4207] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 300.197133][ T4207] usbdux: probe of 1-1:0.0 failed with error -22 [ 300.293422][ T4210] usb 2-1: USB disconnect, device number 6 [ 300.349827][ T21] usb 1-1: USB disconnect, device number 8 [ 300.481874][ T4208] usb 3-1: USB disconnect, device number 9 [ 300.678204][ T4227] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 300.967909][ T4208] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 301.016188][ T4229] Bluetooth: hci6: Frame reassembly failed (-84) [ 301.068678][ T4227] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.117200][ T4227] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.212064][ T4227] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.298393][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.418882][ T4661] Bluetooth: hci5: command 0x1009 tx timeout [ 301.432709][ T6342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 303.018164][ T4227] Bluetooth: hci6: command 0x1003 tx timeout [ 303.031184][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 303.263541][ T7] usb 5-1: USB disconnect, device number 14 [ 303.367992][ T4208] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 303.377463][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.368255][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 304.808576][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.843520][ T4208] usb 3-1: Product: syz [ 304.848049][ T4208] usb 3-1: Manufacturer: syz [ 304.852853][ T4208] usb 3-1: SerialNumber: syz [ 304.859944][ T7] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 304.869263][ T4208] usb 3-1: config 0 descriptor?? [ 304.890173][ T4208] usb 3-1: can't set config #0, error -71 [ 304.892051][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.899744][ T4208] usb 3-1: USB disconnect, device number 10 [ 304.949496][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.011237][ T7] usb 1-1: invalid MIDI out EP 0 [ 305.011501][ T6370] MPTCP: kernel_bind error, err=-98 [ 305.100943][ T7] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 305.127425][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 305.154849][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.192707][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 305.232862][ T6367] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 305.241134][ T6367] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 305.264079][ T7] usb 1-1: USB disconnect, device number 9 [ 306.154508][ T4207] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 306.277919][ T4208] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 306.552819][ T4207] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 306.572923][ T4207] usb 4-1: config 0 has no interface number 0 [ 306.781008][ T4207] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 306.810126][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.838056][ T4208] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 306.847303][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.847862][ T4207] usb 4-1: Product: syz [ 306.869257][ T4207] usb 4-1: Manufacturer: syz [ 306.897088][ T4207] usb 4-1: SerialNumber: syz [ 306.999151][ T4207] usb 4-1: config 0 descriptor?? [ 307.088320][ T4207] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 307.149373][ T4207] ems_usb: probe of 4-1:0.204 failed with error -22 [ 307.277046][ T4227] Bluetooth: hci6: command 0x1009 tx timeout [ 307.438276][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.848491][ T7] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 307.868398][ T7] usb 3-1: config 0 has no interface number 0 [ 308.070070][ T7] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 308.098307][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.155547][ T7] usb 3-1: Product: syz [ 308.179036][ T7] usb 3-1: Manufacturer: syz [ 308.198067][ T7] usb 3-1: SerialNumber: syz [ 308.266389][ T7] usb 3-1: config 0 descriptor?? [ 308.355170][ T7] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 308.384678][ T7] ems_usb: probe of 3-1:0.204 failed with error -22 [ 308.868675][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 308.889010][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 309.194486][ T7] usb 4-1: USB disconnect, device number 9 [ 310.238262][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 310.427081][ T4227] usb 3-1: USB disconnect, device number 11 [ 310.618861][ T4208] usb 1-1: Product: syz [ 310.623248][ T4208] usb 1-1: Manufacturer: syz [ 310.627936][ T4208] usb 1-1: SerialNumber: syz [ 310.641041][ T4208] usb 1-1: config 0 descriptor?? [ 310.658206][ T4208] usb 1-1: can't set config #0, error -71 [ 310.658207][ T7] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 310.658231][ T7] usb 4-1: config 0 has no interface number 0 [ 310.665299][ T4208] usb 1-1: USB disconnect, device number 10 [ 310.898092][ T7] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 310.917452][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.926453][ T7] usb 4-1: Product: syz [ 310.936621][ T7] usb 4-1: Manufacturer: syz [ 310.942704][ T7] usb 4-1: SerialNumber: syz [ 310.964509][ T7] usb 4-1: config 0 descriptor?? [ 310.970432][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 310.976713][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 311.024340][ T7] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 311.056486][ T7] ems_usb: probe of 4-1:0.204 failed with error -22 [ 311.128061][ T4208] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 311.363570][ T6432] loop1: detected capacity change from 0 to 512 [ 311.401716][ T6434] loop2: detected capacity change from 0 to 2048 [ 311.470003][ T6432] EXT4-fs (loop1): Ignoring removed orlov option [ 311.483219][ T6434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.492500][ T4208] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 311.502682][ T4208] usb 1-1: config 0 has no interface number 0 [ 311.530072][ T6432] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.514: casefold flag without casefold feature [ 311.550067][ T6432] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.514: couldn't read orphan inode 15 (err -117) [ 311.563482][ T6432] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 311.677003][ T4208] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 311.688279][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.696309][ T4208] usb 1-1: Product: syz [ 311.703342][ T4208] usb 1-1: Manufacturer: syz [ 311.708636][ T4208] usb 1-1: SerialNumber: syz [ 311.723322][ T4208] usb 1-1: config 0 descriptor?? [ 311.768735][ T4208] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 311.779247][ T4208] ems_usb: probe of 1-1:0.204 failed with error -22 [ 311.833367][ T6438] loop1: detected capacity change from 0 to 512 [ 311.843670][ T6438] EXT4-fs (loop1): Ignoring removed orlov option [ 311.870942][ T6438] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.516: casefold flag without casefold feature [ 311.885371][ T6438] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.516: couldn't read orphan inode 15 (err -117) [ 311.901855][ T6438] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 312.335443][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 312.504553][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'. [ 312.686309][ T4208] usb 4-1: USB disconnect, device number 10 [ 312.718026][ T4209] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 313.027991][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 313.088161][ T4209] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.103688][ T4209] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.113746][ T4209] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.123014][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.148342][ T6454] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 313.842236][ T4210] usb 1-1: USB disconnect, device number 11 [ 314.162833][ T5396] usb 2-1: USB disconnect, device number 7 [ 317.029441][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.035734][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.130525][ T6543] overlayfs: failed to resolve './file0': -2 [ 320.207125][ T4253] Bluetooth: hci6: command 0x1003 tx timeout [ 320.288539][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 320.867890][ T4212] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 321.024640][ T4253] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 321.558093][ T4253] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 321.570447][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.585088][ T4253] usb 3-1: Product: syz [ 321.592660][ T4253] usb 3-1: Manufacturer: syz [ 321.602764][ T4253] usb 3-1: SerialNumber: syz [ 321.619858][ T4253] usb 3-1: config 0 descriptor?? [ 321.663803][ T4253] usb 3-1: selecting invalid altsetting 3 [ 321.672875][ T4253] comedi comedi0: could not set alternate setting 3 in high speed [ 321.680986][ T4253] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 321.692310][ T4253] usbdux: probe of 3-1:0.0 failed with error -22 [ 321.700481][ T4212] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.805972][ T4212] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.816542][ T4212] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.826629][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.868300][ T6556] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 322.573944][ T4207] Bluetooth: hci6: command 0x1001 tx timeout [ 322.581687][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 323.644997][ T4253] usb 3-1: USB disconnect, device number 12 [ 323.713692][ T4212] usb 5-1: USB disconnect, device number 15 [ 324.097914][ T4253] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 324.221077][ T6595] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 324.249544][ T6595] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 324.530674][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 324.560298][ T6614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.631711][ T6611] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 324.636491][ T4227] Bluetooth: hci6: command 0x1009 tx timeout [ 324.648258][ T6611] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 324.651078][ T6614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.664613][ T4253] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 324.673830][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.682156][ T4253] usb 4-1: Product: syz [ 324.686407][ T4253] usb 4-1: Manufacturer: syz [ 324.691280][ T4253] usb 4-1: SerialNumber: syz [ 324.707179][ T4253] usb 4-1: config 0 descriptor?? [ 324.764900][ T4253] usb 4-1: selecting invalid altsetting 3 [ 324.771383][ T4253] comedi comedi0: could not set alternate setting 3 in high speed [ 324.779806][ T4253] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 324.789960][ T4253] usbdux: probe of 4-1:0.0 failed with error -22 [ 324.863460][ T4207] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 325.147933][ T4212] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 325.227976][ T4207] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 325.236309][ T4207] usb 5-1: config 0 has no interface number 0 [ 325.398028][ T4207] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 325.407113][ T4207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.419286][ T4207] usb 5-1: Product: syz [ 325.424482][ T4207] usb 5-1: Manufacturer: syz [ 325.431556][ T4207] usb 5-1: SerialNumber: syz [ 325.439847][ T4207] usb 5-1: config 0 descriptor?? [ 325.479278][ T4207] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 325.493556][ T4207] ems_usb: probe of 5-1:0.204 failed with error -22 [ 325.538200][ T4212] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 325.546565][ T4212] usb 3-1: config 0 has no interface number 0 [ 325.739416][ T4212] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 325.748749][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.756734][ T4212] usb 3-1: Product: syz [ 325.760999][ T4212] usb 3-1: Manufacturer: syz [ 325.765599][ T4212] usb 3-1: SerialNumber: syz [ 325.772743][ T4212] usb 3-1: config 0 descriptor?? [ 325.833489][ T4212] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 325.847150][ T4212] ems_usb: probe of 3-1:0.204 failed with error -22 [ 326.007946][ T4212] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 326.598296][ T4212] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 326.607375][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.627748][ T4212] usb 2-1: Product: syz [ 326.632137][ T4212] usb 2-1: Manufacturer: syz [ 326.636749][ T4212] usb 2-1: SerialNumber: syz [ 326.652563][ T4208] usb 4-1: USB disconnect, device number 11 [ 326.661573][ T4212] usb 2-1: config 0 descriptor?? [ 326.699730][ T4209] usb 5-1: USB disconnect, device number 16 [ 326.776465][ T4212] usb 2-1: selecting invalid altsetting 3 [ 326.812068][ T4212] comedi comedi0: could not set alternate setting 3 in high speed [ 326.836175][ T4212] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 326.898693][ T4212] usbdux: probe of 2-1:0.0 failed with error -22 [ 327.261116][ T4212] usb 2-1: USB disconnect, device number 8 [ 328.832828][ T4208] usb 3-1: USB disconnect, device number 13 [ 329.100088][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 329.106929][ T146] Bluetooth: hci5: sending frame failed (-49) [ 329.325066][ T6631] MPTCP: kernel_bind error, err=-98 [ 330.354412][ T6637] loop1: detected capacity change from 0 to 512 [ 330.757134][ T6637] EXT4-fs (loop1): Ignoring removed orlov option [ 330.877060][ T6637] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.582: casefold flag without casefold feature [ 330.884171][ T6642] loop0: detected capacity change from 0 to 2048 [ 330.896457][ T6637] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.582: couldn't read orphan inode 15 (err -117) [ 330.915070][ T6637] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 330.994905][ T6642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.155283][ T4159] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 331.204174][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 331.205536][ T6649] loop1: detected capacity change from 0 to 2048 [ 331.222844][ T146] Bluetooth: hci5: sending frame failed (-49) [ 331.241641][ T4207] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 331.252085][ T6649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.568020][ T4159] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.608665][ T4207] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.680009][ T4207] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 331.753727][ T4207] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.828309][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.920174][ T6647] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 332.478237][ T4207] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 332.868878][ T4207] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.930457][ T4207] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 333.030120][ T4207] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.088017][ T4207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.259411][ T4207] usb 2-1: invalid MIDI out EP 0 [ 333.775524][ T4207] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 334.038924][ T4207] Bluetooth: hci5: command 0x1009 tx timeout [ 334.190352][ T4207] usb 5-1: USB disconnect, device number 17 [ 334.218493][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 334.365926][ T4159] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.452485][ T4227] Bluetooth: hci6: command 0x1003 tx timeout [ 334.461640][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 335.405692][ T4159] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.406460][ T4207] usb 2-1: USB disconnect, device number 9 [ 335.415170][ T4159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.431656][ T6663] smc: net device bond0 applied user defined pnetid SYZ2 [ 335.458034][ T4159] usb 3-1: can't set config #27, error -71 [ 335.486419][ T4159] usb 3-1: USB disconnect, device number 14 [ 335.740036][ T6665] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 335.748612][ T6665] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 335.817905][ T4212] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 336.178077][ T23] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 336.258099][ T4212] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.275903][ T4212] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.296919][ T4212] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.324994][ T4212] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.343384][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.444140][ T4212] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 336.464313][ T4247] udevd[4247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.538145][ T4207] Bluetooth: hci6: command 0x1001 tx timeout [ 336.544265][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 336.623053][ T4159] usb 5-1: USB disconnect, device number 18 [ 336.748010][ T23] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 336.757103][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.765893][ T23] usb 3-1: Product: syz [ 336.770404][ T23] usb 3-1: Manufacturer: syz [ 336.775025][ T23] usb 3-1: SerialNumber: syz [ 336.798105][ T23] usb 3-1: config 0 descriptor?? [ 336.852063][ T23] usb 3-1: selecting invalid altsetting 3 [ 336.867670][ T23] comedi comedi0: could not set alternate setting 3 in high speed [ 336.884481][ T23] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 336.897760][ T23] usbdux: probe of 3-1:0.0 failed with error -22 [ 337.187378][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 337.284473][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 337.293541][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.324634][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.527955][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 337.728084][ T23] usb 2-1: device descriptor read/64, error -71 [ 337.917893][ T4207] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 338.007891][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 338.217891][ T23] usb 2-1: device descriptor read/64, error -71 [ 338.277992][ T4207] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 338.286228][ T4207] usb 4-1: config 0 has no interface number 0 [ 338.354438][ T23] usb usb2-port1: attempt power cycle [ 338.468775][ T4207] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 338.778107][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 338.908510][ T23] usb 2-1: device descriptor read/8, error -71 [ 339.054058][ T4159] usb 3-1: USB disconnect, device number 15 [ 339.188112][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.328578][ T23] usb 2-1: device descriptor read/8, error -71 [ 339.458860][ T23] usb usb2-port1: unable to enumerate USB device [ 339.593803][ T6706] MPTCP: kernel_bind error, err=-98 [ 340.232390][ T6708] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 340.332897][ T6708] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 340.998473][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.006669][ T4207] usb 4-1: Product: syz [ 342.356471][ T4207] usb 4-1: Manufacturer: syz [ 342.361198][ T4207] usb 4-1: SerialNumber: syz [ 342.367714][ T4207] usb 4-1: config 0 descriptor?? [ 342.376163][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 342.382424][ T146] Bluetooth: hci5: sending frame failed (-49) [ 342.389110][ T4207] usb 4-1: can't set config #0, error -71 [ 342.395981][ T4207] usb 4-1: USB disconnect, device number 12 [ 342.787909][ T4207] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 342.897911][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 343.258228][ T7] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 343.268246][ T7] usb 3-1: config 0 has no interface number 0 [ 343.308035][ T4207] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 343.317119][ T4207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.335618][ T4207] usb 4-1: Product: syz [ 343.345761][ T4207] usb 4-1: Manufacturer: syz [ 343.350523][ T4207] usb 4-1: SerialNumber: syz [ 343.366381][ T4207] usb 4-1: config 0 descriptor?? [ 343.412200][ T4207] usb 4-1: selecting invalid altsetting 3 [ 343.428680][ T4207] comedi comedi0: could not set alternate setting 3 in high speed [ 343.436829][ T4207] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 343.446476][ T7] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 343.456612][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.470398][ T4207] usbdux: probe of 4-1:0.0 failed with error -22 [ 343.476894][ T7] usb 3-1: Product: syz [ 343.481227][ T7] usb 3-1: Manufacturer: syz [ 343.488240][ T7] usb 3-1: SerialNumber: syz [ 343.504183][ T7] usb 3-1: config 0 descriptor?? [ 343.548879][ T7] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 343.564278][ T7] ems_usb: probe of 3-1:0.204 failed with error -22 [ 343.572622][ T6734] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 343.605850][ T6734] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 344.457951][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 344.467054][ T146] Bluetooth: hci5: sending frame failed (-49) [ 344.845201][ T7] usb 4-1: USB disconnect, device number 13 [ 346.428795][ T7] usb 3-1: USB disconnect, device number 16 [ 346.489917][ T6756] netlink: 56 bytes leftover after parsing attributes in process `syz.3.620'. [ 346.538023][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 346.717994][ T4227] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 348.367940][ T4227] usb 1-1: device descriptor read/all, error -71 [ 348.926868][ T6776] MPTCP: kernel_bind error, err=-98 [ 350.464709][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 351.008118][ T6777] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 351.398213][ T6777] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 351.410431][ T6785] MPTCP: kernel_bind error, err=-98 [ 351.437299][ T6777] usb 5-1: config 0 has no interface number 0 [ 351.743587][ T6777] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 351.781798][ T6777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.814604][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 351.838182][ T6777] usb 5-1: Product: syz [ 351.891508][ T6777] usb 5-1: Manufacturer: syz [ 351.930462][ T6777] usb 5-1: SerialNumber: syz [ 352.077732][ T6777] usb 5-1: config 0 descriptor?? [ 352.144965][ T6777] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 352.174436][ T6777] ems_usb: probe of 5-1:0.204 failed with error -22 [ 353.835865][ T7] usb 5-1: USB disconnect, device number 19 [ 354.244105][ T4253] Bluetooth: hci6: command 0x1001 tx timeout [ 354.260562][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 355.764408][ T6820] netlink: 56 bytes leftover after parsing attributes in process `syz.0.641'. [ 357.635510][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 357.721648][ T4207] Bluetooth: hci5: command 0x1003 tx timeout [ 357.777839][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 357.857980][ T23] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 358.268969][ T23] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 358.321467][ T23] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 358.400101][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.451529][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.528262][ T6829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 358.767900][ T4207] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 359.138058][ T4207] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.153999][ T4207] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.169195][ T4207] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.183319][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.208315][ T6833] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 359.818040][ T4207] Bluetooth: hci5: command 0x1001 tx timeout [ 359.824356][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 360.354134][ T4207] usb 1-1: USB disconnect, device number 14 [ 360.399971][ T4213] usb 5-1: USB disconnect, device number 20 [ 361.863632][ T4207] Bluetooth: hci6: command 0x1003 tx timeout [ 362.391173][ T1107] Bluetooth: hci5: command 0x1009 tx timeout [ 362.413120][ T4174] Bluetooth: hci6: sending frame failed (-49) [ 363.282477][ T6872] loop4: detected capacity change from 0 to 2048 [ 363.309532][ T6870] netlink: 56 bytes leftover after parsing attributes in process `syz.0.654'. [ 363.332691][ T6872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.202056][ T4209] Bluetooth: hci6: command 0x1001 tx timeout [ 365.208348][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 365.807380][ T1107] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 366.510089][ T4253] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 366.648362][ T1107] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 366.657473][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.666915][ T1107] usb 1-1: Product: syz [ 366.671612][ T1107] usb 1-1: Manufacturer: syz [ 366.676237][ T1107] usb 1-1: SerialNumber: syz [ 366.683367][ T1107] usb 1-1: config 0 descriptor?? [ 366.732949][ T1107] usb 1-1: selecting invalid altsetting 3 [ 366.738815][ T1107] comedi comedi0: could not set alternate setting 3 in high speed [ 366.746655][ T1107] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 366.757505][ T1107] usbdux: probe of 1-1:0.0 failed with error -22 [ 367.490935][ T1107] usb 1-1: USB disconnect, device number 15 [ 367.626741][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 367.808146][ T4253] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.827911][ T4253] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.857965][ T4253] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.927966][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.958748][ T6887] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 370.712096][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 370.792306][ T4253] usb 5-1: USB disconnect, device number 21 [ 370.867169][ T6926] netlink: 56 bytes leftover after parsing attributes in process `syz.1.672'. [ 371.502458][ T23] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 371.964285][ T4207] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 372.078007][ T23] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 372.094580][ T23] usb 5-1: config 0 has no interface number 0 [ 372.359207][ T23] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 372.408761][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.595893][ T23] usb 5-1: Product: syz [ 372.986278][ T23] usb 5-1: Manufacturer: syz [ 372.991726][ T23] usb 5-1: SerialNumber: syz [ 373.009128][ T23] usb 5-1: config 0 descriptor?? [ 373.048835][ T23] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 373.074178][ T23] ems_usb: probe of 5-1:0.204 failed with error -22 [ 374.237997][ T4207] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 374.247089][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.268450][ T4207] usb 2-1: Product: syz [ 374.272676][ T4207] usb 2-1: Manufacturer: syz [ 374.277294][ T4207] usb 2-1: SerialNumber: syz [ 374.299714][ T4207] usb 2-1: config 0 descriptor?? [ 374.347637][ T4207] usb 2-1: selecting invalid altsetting 3 [ 374.353667][ T4207] comedi comedi0: could not set alternate setting 3 in high speed [ 374.379046][ T4207] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 374.413290][ T4207] usbdux: probe of 2-1:0.0 failed with error -22 [ 374.498866][ T1107] usb 5-1: USB disconnect, device number 22 [ 375.812003][ T4227] usb 2-1: USB disconnect, device number 14 [ 378.460717][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.467114][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.811680][ T6987] device veth1_to_team entered promiscuous mode [ 380.889760][ T6987] team0: Port device team_slave_1 removed [ 382.512787][ T4278] Bluetooth: hci5: Frame reassembly failed (-84) [ 383.597954][ T1107] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 385.163057][ T4661] Bluetooth: hci5: command 0x1003 tx timeout [ 385.182129][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 386.278008][ T4661] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 386.370952][ T7039] loop3: detected capacity change from 0 to 2048 [ 386.483713][ T7039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.658080][ T4661] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.669190][ T4661] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.687906][ T4661] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.696981][ T4661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.728288][ T7028] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 387.270277][ T4661] Bluetooth: hci5: command 0x1001 tx timeout [ 387.276399][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 389.070518][ T4213] usb 5-1: USB disconnect, device number 23 [ 389.942739][ T4207] Bluetooth: hci5: command 0x1009 tx timeout [ 392.376745][ T7085] loop0: detected capacity change from 0 to 2048 [ 392.514162][ T7085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.686947][ T7106] device veth1_to_team entered promiscuous mode [ 395.661160][ T7106] team0: Port device team_slave_1 removed [ 397.555607][ T7132] MPTCP: kernel_bind error, err=-98 [ 398.611354][ T7148] loop0: detected capacity change from 0 to 2048 [ 398.661358][ T7148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.957933][ T7168] device veth1_to_team entered promiscuous mode [ 401.994853][ T7168] team0: Port device team_slave_1 removed [ 402.835207][ T7183] MPTCP: kernel_bind error, err=-98 [ 404.110421][ T7199] netlink: 'syz.0.756': attribute type 12 has an invalid length. [ 405.836639][ T7217] loop3: detected capacity change from 0 to 2048 [ 407.067126][ T7217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.400559][ T4207] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 408.561273][ T7241] netlink: 'syz.3.769': attribute type 12 has an invalid length. [ 409.808070][ T4207] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 409.819165][ T4207] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 409.829474][ T4207] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 409.838924][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.988038][ T4207] usb 1-1: can't set config #27, error -71 [ 409.994968][ T4207] usb 1-1: USB disconnect, device number 17 [ 410.305474][ T7257] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 410.332019][ T7257] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 411.631587][ T7277] netlink: 'syz.0.781': attribute type 12 has an invalid length. [ 411.752976][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 412.107876][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 413.338007][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 413.383336][ T7] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 413.416857][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 413.426669][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.488348][ T7282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 413.520314][ T7303] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 413.534515][ T7303] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 413.888337][ T7] Process accounting resumed [ 415.443885][ T7] usb 4-1: USB disconnect, device number 14 [ 416.898680][ T7346] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 416.906789][ T7346] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 420.092356][ T7375] kernel profiling enabled (shift: 7) [ 421.388053][ T7379] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 421.778725][ T7379] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.160955][ T7379] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.229068][ T7391] loop2: detected capacity change from 0 to 8 [ 422.921423][ T7379] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.931167][ T7379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.958238][ T7383] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.128836][ T7379] Process accounting resumed [ 424.868608][ T4253] usb 4-1: USB disconnect, device number 15 [ 428.433141][ T7446] loop3: detected capacity change from 0 to 8 [ 428.547982][ T4258] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 428.947935][ T4258] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.959178][ T4258] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.979963][ T4258] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.996183][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.048439][ T7445] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 429.192468][ T7452] loop4: detected capacity change from 0 to 1024 [ 429.235335][ T7452] EXT4-fs (loop4): Ignoring removed orlov option [ 429.258046][ T7452] EXT4-fs (loop4): Ignoring removed nobh option [ 429.271237][ T7452] EXT4-fs (loop4): Ignoring removed bh option [ 429.300326][ T7452] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 429.403362][ T7452] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 430.233649][ T4258] usb 3-1: USB disconnect, device number 17 [ 437.620345][ T4258] Process accounting resumed [ 439.900407][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.907145][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.396639][ T7560] loop2: detected capacity change from 0 to 8 [ 451.974910][ T21] Process accounting resumed [ 453.572460][ T21] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 454.988640][ T21] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 455.005396][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.014309][ T21] usb 1-1: Product: syz [ 455.018706][ T21] usb 1-1: Manufacturer: syz [ 455.023447][ T21] usb 1-1: SerialNumber: syz [ 455.618926][ T21] usb 1-1: config 0 descriptor?? [ 455.787873][ T21] usb 1-1: selecting invalid altsetting 3 [ 455.794191][ T21] comedi comedi0: could not set alternate setting 3 in high speed [ 455.802232][ T21] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 455.831810][ T21] usbdux: probe of 1-1:0.0 failed with error -22 [ 455.946615][ T21] usb 1-1: USB disconnect, device number 18 [ 459.119878][ T7656] MPTCP: kernel_bind error, err=-98 [ 462.459617][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 463.379380][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 464.833129][ T3505] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 467.092936][ T7599] Bluetooth: hci5: command 0x1001 tx timeout [ 467.118984][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 467.668216][ T3505] usb 3-1: device descriptor read/all, error -71 [ 468.120641][ T4267] Bluetooth: hci6: Frame reassembly failed (-84) [ 469.981376][ T3505] Bluetooth: hci5: command 0x1009 tx timeout [ 470.360100][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 470.366928][ T146] Bluetooth: hci6: sending frame failed (-49) [ 471.967947][ T7] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 472.570141][ T4207] Bluetooth: hci6: command 0x1001 tx timeout [ 472.576564][ T146] Bluetooth: hci6: sending frame failed (-49) [ 473.536609][ T7754] loop4: detected capacity change from 0 to 2048 [ 473.603880][ T7] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 473.703496][ T7754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.583862][ T7765] netlink: 'syz.2.918': attribute type 12 has an invalid length. [ 475.099377][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.107422][ T7] usb 4-1: Product: syz [ 475.111717][ T7] usb 4-1: Manufacturer: syz [ 475.116331][ T7] usb 4-1: SerialNumber: syz [ 475.124780][ T4211] Bluetooth: hci6: command 0x1009 tx timeout [ 475.132519][ T7] usb 4-1: config 0 descriptor?? [ 475.158028][ T7] usb 4-1: can't set config #0, error -71 [ 475.175970][ T7] usb 4-1: USB disconnect, device number 16 [ 477.396374][ T7782] MPTCP: kernel_bind error, err=-98 [ 478.087943][ T7] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 478.436048][ T7804] netlink: 'syz.1.933': attribute type 12 has an invalid length. [ 478.488674][ T7] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 478.499261][ T7] usb 5-1: config 0 has no interface number 0 [ 478.828171][ T7] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 478.837294][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.931727][ T7] usb 5-1: Product: syz [ 478.935941][ T7] usb 5-1: Manufacturer: syz [ 478.954365][ T7] usb 5-1: SerialNumber: syz [ 478.993397][ T7] usb 5-1: config 0 descriptor?? [ 479.038823][ T7] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 479.083088][ T7] ems_usb: probe of 5-1:0.204 failed with error -22 [ 480.281703][ T7822] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 480.326371][ T7822] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 480.562166][ T7830] MPTCP: kernel_bind error, err=-98 [ 480.725284][ T7599] usb 5-1: USB disconnect, device number 24 [ 481.893788][ T7849] netlink: 'syz.2.949': attribute type 12 has an invalid length. [ 482.996521][ T7599] Bluetooth: hci5: command 0x1003 tx timeout [ 483.028080][ T146] Bluetooth: hci5: sending frame failed (-49) [ 484.667602][ T7879] MPTCP: kernel_bind error, err=-98 [ 484.751978][ T7876] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 484.775259][ T7876] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 485.107040][ T4211] Bluetooth: hci5: command 0x1001 tx timeout [ 485.114409][ T146] Bluetooth: hci5: sending frame failed (-49) [ 485.628107][ T7379] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 486.234012][ T7899] netlink: 'syz.2.964': attribute type 12 has an invalid length. [ 486.544259][ T7379] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 486.555215][ T7379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.568457][ T7379] usb 1-1: Product: syz [ 486.572748][ T7379] usb 1-1: Manufacturer: syz [ 486.577455][ T7379] usb 1-1: SerialNumber: syz [ 486.598606][ T7379] usb 1-1: config 0 descriptor?? [ 486.668759][ T7379] usb 1-1: selecting invalid altsetting 3 [ 486.684531][ T7379] comedi comedi0: could not set alternate setting 3 in high speed [ 486.702920][ T7379] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 486.731816][ T7379] usbdux: probe of 1-1:0.0 failed with error -22 [ 486.875174][ T7895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.961'. [ 487.178042][ T7599] Bluetooth: hci5: command 0x1009 tx timeout [ 488.220961][ T7930] MPTCP: kernel_bind error, err=-98 [ 488.345687][ T7599] usb 1-1: USB disconnect, device number 19 [ 490.998056][ T4211] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 492.018079][ T4211] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 492.033459][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.052219][ T4211] usb 3-1: Product: syz [ 492.056670][ T4211] usb 3-1: Manufacturer: syz [ 492.066421][ T4211] usb 3-1: SerialNumber: syz [ 492.090061][ T4211] usb 3-1: config 0 descriptor?? [ 492.160689][ T4211] usb 3-1: selecting invalid altsetting 3 [ 492.215930][ T4211] comedi comedi0: could not set alternate setting 3 in high speed [ 492.265085][ T4211] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 492.305833][ T4211] usbdux: probe of 3-1:0.0 failed with error -22 [ 492.555464][ T4211] usb 3-1: USB disconnect, device number 20 [ 495.241470][ T7379] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 495.628084][ T7379] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 495.642129][ T7379] usb 2-1: config 0 has no interface number 0 [ 495.651002][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 495.828196][ T7379] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 495.857953][ T7379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.883646][ T7379] usb 2-1: Product: syz [ 495.913600][ T7379] usb 2-1: Manufacturer: syz [ 495.920025][ T7379] usb 2-1: SerialNumber: syz [ 498.115355][ T7379] usb 2-1: config 0 descriptor?? [ 500.012294][ T7379] usb 2-1: can't set config #0, error -71 [ 500.019271][ T7379] usb 2-1: USB disconnect, device number 15 [ 500.026033][ T4247] udevd[4247]: setting owner of /dev/bus/usb/002/015 to uid=0, gid=0 failed: No such file or directory [ 501.350200][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.356598][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.542891][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 502.368775][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 504.181831][ T4278] Bluetooth: hci5: Frame reassembly failed (-84) [ 506.217990][ T4207] Bluetooth: hci5: command 0x1003 tx timeout [ 506.224652][ T146] Bluetooth: hci5: sending frame failed (-49) [ 509.067366][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 509.578241][ T146] Bluetooth: hci5: sending frame failed (-49) [ 511.744853][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 513.967841][ T7] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 515.668046][ T7] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 515.684076][ T7] usb 5-1: config 0 has no interface number 0 [ 516.276244][ T7] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 516.310485][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.347829][ T7] usb 5-1: Product: syz [ 516.356689][ T7] usb 5-1: Manufacturer: syz [ 516.500164][ T7] usb 5-1: SerialNumber: syz [ 516.549279][ T7] usb 5-1: config 0 descriptor?? [ 516.589473][ T7] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 516.678862][ T7] ems_usb: probe of 5-1:0.204 failed with error -22 [ 517.097866][ T7] usb 5-1: USB disconnect, device number 25 [ 517.969118][ T4253] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 518.348107][ T4253] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 518.366733][ T4253] usb 1-1: config 0 has no interface number 0 [ 519.609215][ T8182] loop1: detected capacity change from 0 to 8 [ 519.634521][ T8184] loop2: detected capacity change from 0 to 1024 [ 519.659690][ T4253] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 519.684274][ T4253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.718991][ T4253] usb 1-1: Product: syz [ 519.777457][ T8184] EXT4-fs (loop2): Ignoring removed orlov option [ 519.825961][ T4253] usb 1-1: Manufacturer: syz [ 519.874929][ T8184] EXT4-fs (loop2): Ignoring removed nobh option [ 519.907950][ T4253] usb 1-1: SerialNumber: syz [ 519.948184][ T8184] EXT4-fs (loop2): Ignoring removed bh option [ 519.985569][ T4253] usb 1-1: config 0 descriptor?? [ 520.028322][ T8184] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 520.052535][ T4253] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 520.116742][ T8184] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,barrier=0x0000000000000102,dioread_lock,orlov,resgid=0x0000000000000000,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 520.128675][ T4253] ems_usb: probe of 1-1:0.204 failed with error -22 [ 521.712767][ T4253] usb 1-1: USB disconnect, device number 20 [ 522.141871][ T8214] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 527.217904][ T4212] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 527.628053][ T4212] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.657812][ T4212] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.697798][ T4212] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.697870][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.729099][ T8274] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 530.385488][ T21] usb 4-1: USB disconnect, device number 17 [ 531.216901][ T8310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1083'. [ 536.628081][ T4258] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 537.068710][ T4258] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.158556][ T4258] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.265623][ T4258] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.370580][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.549552][ T8348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 537.977864][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 537.984228][ T146] Bluetooth: hci5: sending frame failed (-49) [ 538.084123][ T4258] usb 3-1: USB disconnect, device number 21 [ 538.989065][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.955276][ T8368] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1102'. [ 539.965945][ T8363] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 539.991349][ T8363] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 540.057880][ T4253] Bluetooth: hci5: command 0x1001 tx timeout [ 540.066268][ T146] Bluetooth: hci5: sending frame failed (-49) [ 541.542481][ T8387] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1108'. [ 541.862458][ T8395] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1109'. [ 542.068097][ T4253] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 542.407049][ T5396] Bluetooth: hci5: command 0x1009 tx timeout [ 542.759203][ T4253] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.782585][ T4253] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.813094][ T4253] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.843181][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.854145][ T8397] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 542.862230][ T8397] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 542.898247][ T8393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 543.832328][ T8415] overlayfs: overlapping lowerdir path [ 545.417439][ T4253] usb 1-1: USB disconnect, device number 21 [ 550.604187][ T4253] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 550.977995][ T4253] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.009426][ T4253] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 551.039985][ T4253] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.077768][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.138386][ T8467] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 551.684185][ T8484] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 551.702611][ T8484] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 552.174477][ T8489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1136'. [ 553.924925][ T4211] usb 5-1: USB disconnect, device number 26 [ 555.599147][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'. [ 558.014154][ T8553] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 558.068083][ T8553] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 560.436207][ T8577] device veth1_to_team entered promiscuous mode [ 561.491867][ T8577] team0: Port device team_slave_1 removed [ 564.272062][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.278470][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.679350][ T8617] loop2: detected capacity change from 0 to 8 [ 569.437793][ T4258] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 571.637896][ T4258] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 571.647017][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.917780][ T4258] usb 5-1: Product: syz [ 574.921985][ T4258] usb 5-1: Manufacturer: syz [ 575.098111][ T4258] usb 5-1: SerialNumber: syz [ 575.134273][ T4258] usb 5-1: config 0 descriptor?? [ 575.707967][ T4258] usb 5-1: can't set config #0, error -71 [ 575.724914][ T4258] usb 5-1: USB disconnect, device number 27 [ 578.489451][ T4258] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 580.038096][ T4258] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 580.067648][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.100282][ T4258] usb 2-1: Product: syz [ 580.104495][ T4258] usb 2-1: Manufacturer: syz [ 580.127171][ T4258] usb 2-1: SerialNumber: syz [ 580.149813][ T4258] usb 2-1: config 0 descriptor?? [ 580.224386][ T4258] usb 2-1: selecting invalid altsetting 3 [ 580.239316][ T4258] comedi comedi0: could not set alternate setting 3 in high speed [ 580.261295][ T4258] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 580.286601][ T4258] usbdux: probe of 2-1:0.0 failed with error -22 [ 580.425028][ T4258] usb 2-1: USB disconnect, device number 16 [ 580.467864][ T7599] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 580.841205][ T7599] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.864654][ T7599] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 580.893833][ T7599] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.923737][ T7599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.968259][ T8748] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 585.535392][ T7] usb 5-1: USB disconnect, device number 28 [ 586.468818][ T23] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 587.674741][ T23] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 587.691831][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.705445][ T4211] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 587.759315][ T23] usb 5-1: Product: syz [ 587.777491][ T23] usb 5-1: Manufacturer: syz [ 587.790279][ T23] usb 5-1: SerialNumber: syz [ 587.824252][ T23] usb 5-1: config 0 descriptor?? [ 587.896862][ T23] usb 5-1: selecting invalid altsetting 3 [ 587.913115][ T23] comedi comedi0: could not set alternate setting 3 in high speed [ 587.931452][ T23] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 587.959425][ T23] usbdux: probe of 5-1:0.0 failed with error -22 [ 588.101477][ T8801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1229'. [ 588.164361][ T8814] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 588.177800][ T8814] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 588.228017][ T4211] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 588.241804][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.259009][ T4211] usb 2-1: Product: syz [ 588.268217][ T4211] usb 2-1: Manufacturer: syz [ 588.277986][ T4211] usb 2-1: SerialNumber: syz [ 588.312197][ T4211] usb 2-1: config 0 descriptor?? [ 588.382292][ T4211] usb 2-1: selecting invalid altsetting 3 [ 588.408853][ T4211] comedi comedi0: could not set alternate setting 3 in high speed [ 588.612246][ T4211] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 588.848963][ T4211] usbdux: probe of 2-1:0.0 failed with error -22 [ 589.026821][ T4211] usb 2-1: USB disconnect, device number 17 [ 589.271371][ T8826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1240'. [ 589.380379][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 590.992365][ T23] usb 5-1: USB disconnect, device number 29 [ 592.872859][ T8862] device veth1_to_team entered promiscuous mode [ 593.504987][ T8861] overlayfs: overlapping lowerdir path [ 593.678423][ T8853] device veth1_to_team left promiscuous mode [ 594.558138][ T4211] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 595.325153][ T4352] Bluetooth: hci5: Frame reassembly failed (-84) [ 595.388705][ T4211] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 595.442481][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.559201][ T4211] usb 3-1: Product: syz [ 597.651404][ T4211] usb 3-1: Manufacturer: syz [ 597.677880][ T4211] usb 3-1: SerialNumber: syz [ 597.929680][ T4211] usb 3-1: config 0 descriptor?? [ 597.940406][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 597.946812][ T146] Bluetooth: hci5: sending frame failed (-49) [ 597.953983][ T4211] usb 3-1: can't set config #0, error -71 [ 597.961219][ T4211] usb 3-1: USB disconnect, device number 22 [ 600.814450][ T4211] Bluetooth: hci5: command 0x1001 tx timeout [ 600.820613][ T146] Bluetooth: hci5: sending frame failed (-49) [ 601.947797][ T4258] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 602.990599][ T4211] Bluetooth: hci5: command 0x1009 tx timeout [ 603.008648][ T4258] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 603.052844][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.108438][ T4258] usb 2-1: Product: syz [ 603.139978][ T4258] usb 2-1: Manufacturer: syz [ 603.168990][ T4258] usb 2-1: SerialNumber: syz [ 603.251156][ T4258] usb 2-1: config 0 descriptor?? [ 603.380800][ T4258] usb 2-1: selecting invalid altsetting 3 [ 603.414933][ T4258] comedi comedi0: could not set alternate setting 3 in high speed [ 603.468919][ T4258] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 603.546206][ T4258] usbdux: probe of 2-1:0.0 failed with error -22 [ 603.657202][ T4258] usb 2-1: USB disconnect, device number 18 [ 604.366183][ T4211] Bluetooth: hci6: command 0x1003 tx timeout [ 606.109219][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 608.325704][ T21] Bluetooth: hci6: command 0x1001 tx timeout [ 608.388120][ T4176] Bluetooth: hci6: sending frame failed (-49) [ 610.523260][ T4212] Bluetooth: hci6: command 0x1009 tx timeout [ 611.047493][ T8987] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 611.079153][ T8987] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 616.064958][ T4227] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 616.276285][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 616.638446][ T4227] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 616.717621][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.888956][ T4227] usb 4-1: Product: syz [ 616.988168][ T4227] usb 4-1: Manufacturer: syz [ 617.015304][ T4227] usb 4-1: SerialNumber: syz [ 617.045039][ T4227] usb 4-1: config 0 descriptor?? [ 617.112214][ T4227] usb 4-1: selecting invalid altsetting 3 [ 617.121843][ T4227] comedi comedi0: could not set alternate setting 3 in high speed [ 617.140511][ T4227] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 617.154167][ T4227] usbdux: probe of 4-1:0.0 failed with error -22 [ 617.342394][ T9029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1296'. [ 617.398029][ T4211] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 617.809228][ T4211] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 617.827974][ T4211] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 617.839876][ T4211] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.866317][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.908747][ T9053] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 618.416304][ T21] usb 4-1: USB disconnect, device number 18 [ 620.392878][ T23] usb 3-1: USB disconnect, device number 23 [ 620.833873][ T9108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1318'. [ 621.627957][ T4212] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 622.208716][ T4212] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 622.253989][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.441904][ T4212] usb 5-1: Product: syz [ 622.527434][ T4212] usb 5-1: Manufacturer: syz [ 622.534760][ T4212] usb 5-1: SerialNumber: syz [ 622.588441][ T4212] usb 5-1: config 0 descriptor?? [ 622.662932][ T4212] usb 5-1: selecting invalid altsetting 3 [ 622.705877][ T4212] comedi comedi0: could not set alternate setting 3 in high speed [ 622.742631][ T4212] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 622.804216][ T4212] usbdux: probe of 5-1:0.0 failed with error -22 [ 623.632168][ T4212] usb 5-1: USB disconnect, device number 30 [ 626.857849][ T4227] Bluetooth: hci5: command 0x1003 tx timeout [ 626.865441][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 627.441674][ T9164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1334'. [ 628.937848][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 628.946065][ T4176] Bluetooth: hci5: sending frame failed (-49) [ 629.351786][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.358339][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.907830][ T4227] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 631.022362][ T5396] Bluetooth: hci5: command 0x1009 tx timeout [ 631.447957][ T4227] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 631.471974][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.501278][ T4227] usb 1-1: Product: syz [ 631.525335][ T4227] usb 1-1: Manufacturer: syz [ 631.547828][ T4227] usb 1-1: SerialNumber: syz [ 631.567300][ T4227] usb 1-1: config 0 descriptor?? [ 631.651663][ T4227] usb 1-1: selecting invalid altsetting 3 [ 631.710172][ T4227] comedi comedi0: could not set alternate setting 3 in high speed [ 631.766117][ T4227] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 632.097575][ T4227] usbdux: probe of 1-1:0.0 failed with error -22 [ 632.172290][ T4227] usb 1-1: USB disconnect, device number 22 [ 637.454403][ T4253] Bluetooth: hci6: command 0x1003 tx timeout [ 637.480784][ T146] Bluetooth: hci6: sending frame failed (-49) [ 639.244859][ T9249] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1359'. [ 639.498198][ T4253] Bluetooth: hci6: command 0x1001 tx timeout [ 639.510612][ T146] Bluetooth: hci6: sending frame failed (-49) [ 641.583385][ T4227] Bluetooth: hci6: command 0x1009 tx timeout [ 643.669753][ T9284] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1368'. [ 645.305870][ T9313] MPTCP: kernel_bind error, err=-98 [ 646.614884][ T9340] fuse: Bad value for 'group_id' [ 650.634083][ T9376] MPTCP: kernel_bind error, err=-98 [ 651.221700][ T9379] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 651.241482][ T9379] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 654.688547][ T4258] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 655.242062][ T4258] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.253728][ T4258] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 655.264214][ T4258] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.273587][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.318121][ T9423] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 656.175607][ T4258] usb 2-1: USB disconnect, device number 19 [ 656.431217][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.318189][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 658.141222][ T4258] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 658.507777][ T4258] usb 4-1: Using ep0 maxpacket: 32 [ 658.658211][ T4258] usb 4-1: config 8 has an invalid interface number: 239 but max is 0 [ 658.667537][ T4258] usb 4-1: config 8 has no interface number 0 [ 658.679577][ T4258] usb 4-1: config 8 interface 239 has no altsetting 0 [ 658.977862][ T4258] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=f6.e3 [ 658.999816][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.009937][ T4258] usb 4-1: Product: syz [ 659.014130][ T4258] usb 4-1: Manufacturer: syz [ 659.078523][ T4258] usb 4-1: SerialNumber: syz [ 659.465286][ T4258] usb 4-1: USB disconnect, device number 19 [ 659.717866][ T4208] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 660.348627][ T4208] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 660.440119][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.696131][ T4208] usb 1-1: Product: syz [ 660.722453][ T4208] usb 1-1: Manufacturer: syz [ 660.744736][ T4208] usb 1-1: SerialNumber: syz [ 660.921557][ T4208] usb 1-1: config 0 descriptor?? [ 660.975794][ T4208] usb 1-1: selecting invalid altsetting 3 [ 660.981628][ T4208] comedi comedi0: could not set alternate setting 3 in high speed [ 661.007984][ T4208] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 661.017481][ T4208] usbdux: probe of 1-1:0.0 failed with error -22 [ 661.161874][ T9498] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 661.172143][ T9498] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 661.174528][ T4208] usb 1-1: USB disconnect, device number 23 [ 661.207857][ T8879] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 661.578750][ T8879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.616275][ T8879] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 661.636948][ T8879] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 661.646371][ T8879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.688188][ T9503] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 662.065666][ T9522] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 662.108181][ T9522] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 664.031350][ T4227] usb 4-1: USB disconnect, device number 20 [ 664.188026][ T9533] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 664.245949][ T9533] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 669.552428][ T6777] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 670.039967][ T9612] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 670.066933][ T9612] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 670.098456][ T6777] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.130118][ T6777] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 670.143958][ T6777] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.154868][ T6777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.198188][ T9597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 670.566330][ T9624] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 670.603067][ T9624] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 672.406754][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'. [ 672.510120][ T4227] usb 5-1: USB disconnect, device number 31 [ 672.551968][ T9655] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1471'. [ 672.733682][ T6777] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 672.997760][ T6777] usb 1-1: Using ep0 maxpacket: 32 [ 674.027941][ T6777] usb 1-1: config 8 has an invalid interface number: 239 but max is 0 [ 674.036293][ T6777] usb 1-1: config 8 has no interface number 0 [ 675.177958][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 675.214552][ T146] Bluetooth: hci5: sending frame failed (-49) [ 676.784109][ T6777] usb 1-1: config 8 interface 239 has no altsetting 0 [ 676.837839][ T6777] usb 1-1: string descriptor 0 read error: -71 [ 676.844129][ T6777] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=f6.e3 [ 676.897887][ T6777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.069032][ T9688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1479'. [ 677.078867][ T6777] usb 1-1: can't set config #8, error -71 [ 677.090774][ T6777] usb 1-1: USB disconnect, device number 24 [ 677.257809][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 677.264015][ T146] Bluetooth: hci5: sending frame failed (-49) [ 677.528215][ T4258] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 677.998390][ T4258] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 678.019242][ T4258] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 678.036453][ T4258] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 678.051399][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.120106][ T9697] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 678.289350][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 678.827987][ T4227] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 679.087837][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 679.207879][ T4227] usb 4-1: config 8 has an invalid interface number: 239 but max is 0 [ 679.243547][ T4227] usb 4-1: config 8 has no interface number 0 [ 679.270746][ T4227] usb 4-1: config 8 interface 239 has no altsetting 0 [ 679.337946][ T8879] Bluetooth: hci5: command 0x1009 tx timeout [ 679.438154][ T4227] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=f6.e3 [ 679.457486][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.467614][ T4227] usb 4-1: Product: syz [ 679.471867][ T4227] usb 4-1: Manufacturer: syz [ 679.476466][ T4227] usb 4-1: SerialNumber: syz [ 681.159694][ T4227] usb 4-1: USB disconnect, device number 21 [ 681.244690][ T8879] usb 5-1: USB disconnect, device number 32 [ 684.172848][ T9759] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1495'. [ 685.681368][ T9771] autofs4:pid:9771:autofs_fill_super: called with bogus options [ 690.825374][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.832290][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.993149][ T9827] overlayfs: overlapping lowerdir path [ 694.211447][ T9830] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1513'. [ 697.270350][ T9855] autofs4:pid:9855:autofs_fill_super: called with bogus options [ 699.110870][ T9867] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 699.127778][ T9867] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 701.553173][ T9892] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 701.633237][ T9892] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 702.568768][ T9901] overlayfs: overlapping lowerdir path [ 704.729581][ T9915] autofs4:pid:9915:autofs_fill_super: called with bogus options [ 711.268503][ T9980] overlayfs: overlapping lowerdir path [ 711.745724][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 712.949882][ T8879] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 713.027984][ T5396] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 713.967911][ T8879] usb 1-1: Using ep0 maxpacket: 32 [ 714.088430][ T8879] usb 1-1: config 8 has an invalid interface number: 239 but max is 0 [ 714.117708][ T8879] usb 1-1: config 8 has no interface number 0 [ 714.133116][ T8879] usb 1-1: config 8 interface 239 has no altsetting 0 [ 714.204430][ T9998] overlayfs: overlapping lowerdir path [ 714.209118][T10012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 714.297867][ T8879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=f6.e3 [ 714.317528][ T8879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.340835][ T8879] usb 1-1: Product: syz [ 714.345173][ T8879] usb 1-1: Manufacturer: syz [ 714.365735][ T8879] usb 1-1: SerialNumber: syz [ 715.342837][ T8879] usb 1-1: USB disconnect, device number 25 [ 715.401784][T10026] autofs4:pid:10026:autofs_fill_super: called with bogus options [ 715.881628][T10036] overlayfs: overlapping lowerdir path [ 717.761610][ T5396] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 719.367944][ T5396] usb 5-1: unable to read config index 0 descriptor/all [ 719.375250][ T5396] usb 5-1: can't read configurations, error -71 [ 719.541412][T10071] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1578'. [ 719.809446][T10075] autofs4:pid:10075:autofs_fill_super: called with bogus options [ 720.224685][T10086] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1579'. [ 721.627988][ T4227] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 721.857735][ T5396] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 721.868126][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 721.987951][ T4227] usb 4-1: config 8 has an invalid interface number: 239 but max is 0 [ 722.003034][ T4227] usb 4-1: config 8 has no interface number 0 [ 722.045133][ T4227] usb 4-1: config 8 interface 239 has no altsetting 0 [ 722.217984][ T4227] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=f6.e3 [ 722.237966][ T5396] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.249482][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.259481][ T5396] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 722.277760][ T4227] usb 4-1: Product: syz [ 722.286659][ T5396] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 722.296370][ T4227] usb 4-1: Manufacturer: syz [ 722.306405][ T4227] usb 4-1: SerialNumber: syz [ 722.336804][ T5396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.418085][T10105] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 724.818013][ T4227] usb 4-1: USB disconnect, device number 22 [ 724.913181][T10128] autofs4:pid:10128:autofs_fill_super: called with bogus options [ 725.498177][ C1] ================================================================== [ 725.506586][ C1] BUG: KASAN: use-after-free in snd_rawmidi_transmit+0x392/0x400 [ 725.514314][ C1] Read of size 1 at addr ffff88805fdfa058 by task udevd/3546 [ 725.521669][ C1] [ 725.524002][ C1] CPU: 1 PID: 3546 Comm: udevd Not tainted 5.15.182-syzkaller #0 [ 725.531705][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 725.541787][ C1] Call Trace: [ 725.545076][ C1] [ 725.547909][ C1] dump_stack_lvl+0x168/0x230 [ 725.552588][ C1] ? show_regs_print_info+0x20/0x20 [ 725.557805][ C1] ? load_image+0x3b0/0x3b0 [ 725.562294][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 725.567749][ C1] print_address_description+0x60/0x2d0 [ 725.573283][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 725.578643][ C1] kasan_report+0xdf/0x130 [ 725.583049][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 725.588413][ C1] snd_rawmidi_transmit+0x392/0x400 [ 725.593605][ C1] snd_usbmidi_standard_output+0x1e4/0xdd0 [ 725.599400][ C1] ? snd_usbmidi_standard_output+0xdd0/0xdd0 [ 725.605371][ C1] ? snd_usbmidi_standard_input+0x110/0x110 [ 725.611250][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 725.616264][ C1] snd_usbmidi_do_output+0x21e/0x560 [ 725.621551][ C1] snd_usbmidi_error_timer+0x312/0x660 [ 725.627021][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 725.632554][ C1] call_timer_fn+0x16c/0x530 [ 725.637137][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 725.642684][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 725.648659][ C1] ? __run_timers+0x7c0/0x7c0 [ 725.653331][ C1] ? rcu_is_watching+0x11/0xa0 [ 725.658085][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 725.663296][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 725.668483][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 725.674018][ C1] __run_timers+0x525/0x7c0 [ 725.678523][ C1] ? detach_timer+0x2b0/0x2b0 [ 725.683208][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 725.689196][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 725.694049][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 725.699327][ C1] run_timer_softirq+0x63/0xf0 [ 725.704084][ C1] handle_softirqs+0x328/0x820 [ 725.708839][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 725.713701][ C1] ? do_softirq+0x200/0x200 [ 725.718207][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 725.723408][ C1] __irq_exit_rcu+0x12f/0x220 [ 725.728070][ C1] ? irq_exit_rcu+0x20/0x20 [ 725.732570][ C1] irq_exit_rcu+0x5/0x20 [ 725.736800][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 725.742424][ C1] [ 725.745341][ C1] [ 725.748275][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 725.754275][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 725.760791][ C1] Code: 74 05 e8 ee 4f d3 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 cf a6 f7 65 8b 05 67 e3 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 725.780421][ C1] RSP: 0018:ffffc900025dfca0 EFLAGS: 00000206 [ 725.786499][ C1] RAX: a56f1ac2083d2500 RBX: 0000000000000a06 RCX: a56f1ac2083d2500 [ 725.794549][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: 0000000000000001 [ 725.802517][ C1] RBP: ffffc900025dfd30 R08: dffffc0000000000 R09: fffffbfff2c676f5 [ 725.810484][ C1] R10: fffffbfff2c676f5 R11: 1ffffffff2c676f4 R12: dffffc0000000000 [ 725.818457][ C1] R13: 1ffff920004bbfb8 R14: ffffffff9633b7a0 R15: 1ffff920004bbf94 [ 725.826446][ C1] ? _raw_spin_unlock+0x40/0x40 [ 725.831295][ C1] ? debug_object_active_state+0x6b/0x340 [ 725.837008][ C1] ? proc_nr_files+0x50/0x50 [ 725.841588][ C1] call_rcu+0xb7/0x920 [ 725.845646][ C1] ? rcu_is_watching+0x11/0xa0 [ 725.850400][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 725.856112][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 725.861908][ C1] ? __fput+0x692/0x930 [ 725.866060][ C1] task_work_run+0x125/0x1a0 [ 725.870644][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 725.876010][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 725.881636][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 725.887089][ C1] do_syscall_64+0x58/0xa0 [ 725.891510][ C1] ? clear_bhb_loop+0x15/0x70 [ 725.896176][ C1] ? clear_bhb_loop+0x15/0x70 [ 725.900841][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 725.906726][ C1] RIP: 0033:0x7f755fd63a67 [ 725.911135][ C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 725.930728][ C1] RSP: 002b:00007fffb0b0a548 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 725.939133][ C1] RAX: 0000000000000000 RBX: 0000558cb326e190 RCX: 00007f755fd63a67 [ 725.947110][ C1] RDX: 00007f755fe3dea0 RSI: 0000558cb3308980 RDI: 000000000000000c [ 725.955069][ C1] RBP: 00007f755fe3dff0 R08: 0000000000000000 R09: 0000000000000000 [ 725.963032][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 725.970995][ C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 725.978974][ C1] [ 725.981986][ C1] [ 725.984312][ C1] Allocated by task 10105: [ 725.988897][ C1] __kasan_kmalloc+0xb5/0xf0 [ 725.993532][ C1] kvmalloc_node+0x84/0x130 [ 725.998566][ C1] open_substream+0x29d/0x6c0 [ 726.003260][ C1] rawmidi_open_priv+0xc4/0x660 [ 726.008196][ C1] snd_rawmidi_kernel_open+0x1a2/0x240 [ 726.013648][ C1] midisynth_use+0xd8/0x260 [ 726.018143][ C1] check_and_subscribe_port+0x669/0xb30 [ 726.023677][ C1] snd_seq_port_connect+0x256/0x430 [ 726.028864][ C1] snd_seq_ioctl_subscribe_port+0x32c/0x6f0 [ 726.034759][ C1] snd_seq_oss_midi_open+0x3a4/0x7c0 [ 726.040037][ C1] snd_seq_oss_synth_setup_midi+0x129/0x520 [ 726.045928][ C1] snd_seq_oss_open+0x87a/0xe40 [ 726.050781][ C1] odev_open+0x63/0x90 [ 726.054847][ C1] chrdev_open+0x597/0x670 [ 726.059267][ C1] do_dentry_open+0x7ff/0xf80 [ 726.063937][ C1] path_openat+0x2682/0x2f30 [ 726.068558][ C1] do_filp_open+0x1b3/0x3e0 [ 726.073069][ C1] do_sys_openat2+0x142/0x4a0 [ 726.077741][ C1] __x64_sys_openat+0x135/0x160 [ 726.082609][ C1] do_syscall_64+0x4c/0xa0 [ 726.087019][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 726.093003][ C1] [ 726.095317][ C1] Freed by task 10105: [ 726.099364][ C1] kasan_set_track+0x4b/0x70 [ 726.103971][ C1] kasan_set_free_info+0x1f/0x40 [ 726.108894][ C1] ____kasan_slab_free+0xd5/0x110 [ 726.113906][ C1] slab_free_freelist_hook+0xea/0x170 [ 726.119265][ C1] kfree+0xef/0x2a0 [ 726.123078][ C1] close_substream+0x360/0x5a0 [ 726.127829][ C1] rawmidi_release_priv+0xe9/0x170 [ 726.132956][ C1] snd_rawmidi_kernel_release+0x42/0xa0 [ 726.138497][ C1] __delete_and_unsubscribe_port+0x280/0x430 [ 726.144496][ C1] snd_seq_port_disconnect+0x4f5/0x620 [ 726.149942][ C1] snd_seq_ioctl_unsubscribe_port+0x32c/0x6f0 [ 726.156000][ C1] snd_seq_oss_midi_close+0x2fc/0x620 [ 726.161366][ C1] snd_seq_oss_synth_reset+0x3e9/0x960 [ 726.166818][ C1] snd_seq_oss_reset+0x56/0x240 [ 726.171675][ C1] snd_seq_oss_release+0xe8/0x2c0 [ 726.176689][ C1] odev_release+0x52/0x70 [ 726.181003][ C1] __fput+0x234/0x930 [ 726.184995][ C1] task_work_run+0x125/0x1a0 [ 726.189590][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 726.194994][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 726.200528][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 726.205980][ C1] do_syscall_64+0x58/0xa0 [ 726.210383][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 726.216276][ C1] [ 726.218588][ C1] The buggy address belongs to the object at ffff88805fdfa000 [ 726.218588][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 726.232637][ C1] The buggy address is located 88 bytes inside of [ 726.232637][ C1] 4096-byte region [ffff88805fdfa000, ffff88805fdfb000) [ 726.245899][ C1] The buggy address belongs to the page: [ 726.251532][ C1] page:ffffea00017f7e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fdf8 [ 726.261700][ C1] head:ffffea00017f7e00 order:3 compound_mapcount:0 compound_pincount:0 [ 726.270011][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 726.277988][ C1] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842140 [ 726.286558][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 726.295125][ C1] page dumped because: kasan: bad access detected [ 726.301527][ C1] page_owner tracks the page as allocated [ 726.307249][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 10105, ts 724350415657, free_ts 722131021083 [ 726.327987][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 726.333531][ C1] __alloc_pages+0x1e1/0x470 [ 726.338116][ C1] new_slab+0xc0/0x4b0 [ 726.342174][ C1] ___slab_alloc+0x81e/0xdf0 [ 726.346772][ C1] __kmalloc_node+0x200/0x3b0 [ 726.351439][ C1] kvmalloc_node+0x84/0x130 [ 726.355930][ C1] open_substream+0x29d/0x6c0 [ 726.360595][ C1] rawmidi_open_priv+0x94/0x660 [ 726.365432][ C1] snd_rawmidi_kernel_open+0x1a2/0x240 [ 726.370877][ C1] midisynth_subscribe+0xd8/0x320 [ 726.375914][ C1] check_and_subscribe_port+0x669/0xb30 [ 726.381460][ C1] snd_seq_port_connect+0x1d4/0x430 [ 726.386669][ C1] snd_seq_ioctl_subscribe_port+0x32c/0x6f0 [ 726.392563][ C1] snd_seq_oss_midi_open+0x4c0/0x7c0 [ 726.397839][ C1] snd_seq_oss_synth_setup_midi+0x129/0x520 [ 726.403722][ C1] snd_seq_oss_open+0x87a/0xe40 [ 726.408570][ C1] page last free stack trace: [ 726.413228][ C1] free_unref_page_prepare+0x637/0x6c0 [ 726.418676][ C1] free_unref_page+0x94/0x280 [ 726.423341][ C1] __unfreeze_partials+0x1a5/0x200 [ 726.428457][ C1] put_cpu_partial+0x12d/0x190 [ 726.433205][ C1] qlist_free_all+0x35/0x90 [ 726.437695][ C1] kasan_quarantine_reduce+0x150/0x160 [ 726.443160][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 726.448125][ C1] slab_post_alloc_hook+0x4c/0x380 [ 726.453238][ C1] kmem_cache_alloc+0x100/0x290 [ 726.458084][ C1] vm_area_dup+0x1e/0xb0 [ 726.462319][ C1] __split_vma+0xb1/0x410 [ 726.466640][ C1] mprotect_fixup+0x50c/0x800 [ 726.471300][ C1] do_mprotect_pkey+0x657/0x910 [ 726.476137][ C1] __x64_sys_mprotect+0x7c/0x90 [ 726.480974][ C1] do_syscall_64+0x4c/0xa0 [ 726.485379][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 726.491264][ C1] [ 726.493578][ C1] Memory state around the buggy address: [ 726.499193][ C1] ffff88805fdf9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 726.507242][ C1] ffff88805fdf9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 726.515307][ C1] >ffff88805fdfa000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.523376][ C1] ^ [ 726.530302][ C1] ffff88805fdfa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.538350][ C1] ffff88805fdfa100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 726.546396][ C1] ================================================================== [ 726.554472][ C1] Disabling lock debugging due to kernel taint [ 726.560647][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 726.567825][ C1] CPU: 1 PID: 3546 Comm: udevd Tainted: G B 5.15.182-syzkaller #0 [ 726.576917][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 726.586996][ C1] Call Trace: [ 726.590276][ C1] [ 726.593109][ C1] dump_stack_lvl+0x168/0x230 [ 726.597782][ C1] ? show_regs_print_info+0x20/0x20 [ 726.602971][ C1] ? load_image+0x3b0/0x3b0 [ 726.607465][ C1] panic+0x2c9/0x7f0 [ 726.611348][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 726.615839][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 726.621739][ C1] ? _raw_spin_unlock+0x40/0x40 [ 726.626578][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 726.631937][ C1] check_panic_on_warn+0x80/0xa0 [ 726.636864][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 726.642223][ C1] end_report+0x6d/0xf0 [ 726.646386][ C1] kasan_report+0x102/0x130 [ 726.650880][ C1] ? snd_rawmidi_transmit+0x392/0x400 [ 726.656239][ C1] snd_rawmidi_transmit+0x392/0x400 [ 726.661516][ C1] snd_usbmidi_standard_output+0x1e4/0xdd0 [ 726.667320][ C1] ? snd_usbmidi_standard_output+0xdd0/0xdd0 [ 726.673288][ C1] ? snd_usbmidi_standard_input+0x110/0x110 [ 726.679168][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 726.684180][ C1] snd_usbmidi_do_output+0x21e/0x560 [ 726.689455][ C1] snd_usbmidi_error_timer+0x312/0x660 [ 726.694900][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 726.700454][ C1] call_timer_fn+0x16c/0x530 [ 726.705035][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 726.710568][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 726.716538][ C1] ? __run_timers+0x7c0/0x7c0 [ 726.721200][ C1] ? rcu_is_watching+0x11/0xa0 [ 726.726031][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 726.731214][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 726.736403][ C1] ? __snd_usbmidi_create+0x2f90/0x2f90 [ 726.741932][ C1] __run_timers+0x525/0x7c0 [ 726.746427][ C1] ? detach_timer+0x2b0/0x2b0 [ 726.751090][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 726.757059][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 726.761891][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 726.767164][ C1] run_timer_softirq+0x63/0xf0 [ 726.771930][ C1] handle_softirqs+0x328/0x820 [ 726.776702][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 726.781552][ C1] ? do_softirq+0x200/0x200 [ 726.786048][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 726.791273][ C1] __irq_exit_rcu+0x12f/0x220 [ 726.796094][ C1] ? irq_exit_rcu+0x20/0x20 [ 726.800599][ C1] irq_exit_rcu+0x5/0x20 [ 726.804834][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 726.810463][ C1] [ 726.813382][ C1] [ 726.816299][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 726.822269][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 726.828778][ C1] Code: 74 05 e8 ee 4f d3 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 cf a6 f7 65 8b 05 67 e3 57 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 726.848390][ C1] RSP: 0018:ffffc900025dfca0 EFLAGS: 00000206 [ 726.854448][ C1] RAX: a56f1ac2083d2500 RBX: 0000000000000a06 RCX: a56f1ac2083d2500 [ 726.862414][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b0fc0 RDI: 0000000000000001 [ 726.870398][ C1] RBP: ffffc900025dfd30 R08: dffffc0000000000 R09: fffffbfff2c676f5 [ 726.878537][ C1] R10: fffffbfff2c676f5 R11: 1ffffffff2c676f4 R12: dffffc0000000000 [ 726.886527][ C1] R13: 1ffff920004bbfb8 R14: ffffffff9633b7a0 R15: 1ffff920004bbf94 [ 726.894602][ C1] ? _raw_spin_unlock+0x40/0x40 [ 726.899453][ C1] ? debug_object_active_state+0x6b/0x340 [ 726.905167][ C1] ? proc_nr_files+0x50/0x50 [ 726.909746][ C1] call_rcu+0xb7/0x920 [ 726.913803][ C1] ? rcu_is_watching+0x11/0xa0 [ 726.918551][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 726.924259][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 726.930064][ C1] ? __fput+0x692/0x930 [ 726.934229][ C1] task_work_run+0x125/0x1a0 [ 726.938810][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 726.944173][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 726.949710][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 726.955158][ C1] do_syscall_64+0x58/0xa0 [ 726.959654][ C1] ? clear_bhb_loop+0x15/0x70 [ 726.964318][ C1] ? clear_bhb_loop+0x15/0x70 [ 726.968980][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 726.974862][ C1] RIP: 0033:0x7f755fd63a67 [ 726.979287][ C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 726.998895][ C1] RSP: 002b:00007fffb0b0a548 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 727.007299][ C1] RAX: 0000000000000000 RBX: 0000558cb326e190 RCX: 00007f755fd63a67 [ 727.015258][ C1] RDX: 00007f755fe3dea0 RSI: 0000558cb3308980 RDI: 000000000000000c [ 727.023214][ C1] RBP: 00007f755fe3dff0 R08: 0000000000000000 R09: 0000000000000000 [ 727.031171][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 727.039223][ C1] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 727.047333][ C1] [ 728.158632][ C1] Shutting down cpus with NMI [ 728.163579][ C1] Kernel Offset: disabled [ 728.167908][ C1] Rebooting in 86400 seconds..