last executing test programs: 16m54.484447885s ago: executing program 1 (id=2): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 16m49.682634775s ago: executing program 1 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000005c0)=0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect(r5, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x10}) 16m48.262548135s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ptrace$poke(0x5, r0, &(0x7f00000002c0), 0x9) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x7, {0xfffffffc, 0xbde, 0x2000400, 0x107fe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m45.857745875s ago: executing program 1 (id=16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x8000}]}, 0x10) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r3, 0xfcff, 0x20000, 0x3) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) 16m42.262051798s ago: executing program 1 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 16m39.895029953s ago: executing program 1 (id=23): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) fcntl$setlease(r3, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 16m24.083927282s ago: executing program 32 (id=23): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) fcntl$setlease(r3, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 15m55.845604614s ago: executing program 0 (id=79): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000004c0)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af97740e17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09d45d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a3b9b3ac212f453253bf5fcac7dd1e683bf671e2c5362e5a701db45df522801ffbf8e5faa1778f0eff73a03e231bb8031912bc25c08c213dbf866aecba07308a5c84732b9ba16275178d55dbce6e68fa7c1740c0021d1cd351a4ef57cb782b0ca2780431eb03ec804619e284369a22503d4b83e29272dd5c7"], 0x43, 0x357, &(0x7f0000000140)="$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") openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000001dc0)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) socket(0x2a, 0x5, 0x8) r0 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x600100, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYBLOB="1265de4fcaa387401cb86ff9f115f83a9df3bcca2a0039ad81ada9f6ef07f404686ede8535eb2d9f47f32480f090797b47ee04ce38bba6db3501f5e4ad283957eed471f834d77a8f5abb54b7ff4719eb19f46bca6f4b2b8d15ae50d87900ac79f797a33a0c64b660b8b8c84eeedb7e0b563f947d20877f16928e56a8b2169c558bf62a13aa5705463e9cdc2579fab81db4b2804947690aa6fa0103951325bdcbe443dc7bbf984d0aab254ae1519669cd5fc3430a37dda31d7a3ec3d13b978b02822390506d47ff9c32"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000000)=0x2) 15m53.431027689s ago: executing program 0 (id=82): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23c, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setgroups(0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000009c0)={0x0, &(0x7f0000000980)}) lsetxattr$security_capability(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 15m48.53852481s ago: executing program 0 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000120008000100000000ff", 0x24) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x6b1dc80, 0x0, "000000010000004000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15m46.507783174s ago: executing program 0 (id=92): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 15m45.306136201s ago: executing program 0 (id=94): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) waitid(0x0, r0, &(0x7f0000000300), 0x20000000, &(0x7f0000000380)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 15m39.160865187s ago: executing program 0 (id=100): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15m24.022284563s ago: executing program 33 (id=100): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m19.977991052s ago: executing program 6 (id=277): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13m17.89446441s ago: executing program 6 (id=280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x80) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 13m10.257332875s ago: executing program 6 (id=293): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2d3}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000020000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffffffff"], 0x50) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000740)={0x5, 0x8e, 0xf, 0x3, 0x9}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13m6.285071557s ago: executing program 6 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, 0x0, 0xffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 13m4.835356416s ago: executing program 6 (id=299): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) open$dir(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0xc004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, &(0x7f0000000d40)={0x2}, 0x8, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2024) 13m2.594244395s ago: executing program 6 (id=302): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 12m46.444526994s ago: executing program 34 (id=302): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 19.353347311s ago: executing program 5 (id=1769): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x2, '_h'}, 0x0}) 16.942586479s ago: executing program 2 (id=1773): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 16.800462384s ago: executing program 4 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x9, 0x1, 0x1000, 0x400, 0xfffffffffffffbd2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x2, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2005c061}, 0x20040060) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.760955859s ago: executing program 5 (id=1775): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4000497, 0x0, &(0x7f00000001c0), 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000140)=""/73, &(0x7f00000000c0)=0x49) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) 16.146043838s ago: executing program 4 (id=1777): syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x0, 0x2, 0x80000001, 0x4c, 0x6, 0x9, 0x0, 0x3, 0xf7}) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r6}) 14.380287243s ago: executing program 7 (id=1780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(0xffffffffffffffff, 0x80) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) waitid(0x1, 0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) getdents64(r2, &(0x7f0000000300)=""/152, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 12.639136061s ago: executing program 5 (id=1781): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)={0x8009, 0x0, [{}, {}, {0x10}, {}, {}, {0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {0x59c2, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x400}]}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) syz_usb_control_io(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000380)={0x40, 0x10, 0xfd, {0xfd, 0x8, "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"}}, &(0x7f0000000540)=ANY=[@ANYBLOB="0003040000000403011c3d935bbab72c43ecbaf40367fe0489abb7343b695a562c87874c9af6554b51583580f098826569755c40219b3e6cc30ac8779f5c72bf2c90b4a5bb697b45e00c0d6f0171e5616de9e6207b5d948508f49357e5175f4368fc0d85c5f4189d936f1f"], &(0x7f0000000180)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7f, 0x1, {0x22, 0xecf}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="0018d3000000abca13c00b5c773b9d99aed6578052b706a8f2a0a10fbd21b0df28e775fed361a97630223bbd1946c801f02f0f0a647258a271b99548f11a6eebf0fb44748f5688bdb1fd8d5db22e35ffb8396cec27d75eac4a377b263e1a8cee70dbef98be28951b3270edba87b77d87595eb3133338e57dd5371f8979cd12cc24dd74225b9eb717a02c415fd70df20dfe888c49ecaeee00f5eb14cd7aea2211e820f04f21b8e5d0a90c9d32d65b4ca7d64fd9ab5d25437835e1a6d91cfc60210e0165838560d9558e11b6137073bcf72bdcaa0233eae1ae4c39d378bd04e163b259c4d8f0d408"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x90}, &(0x7f00000004c0)={0x20, 0x1, 0x9, "dedb91325ad877c0f7"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0xd9}}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000013c0)=ANY=[@ANYBLOB="0800000000000000b5657bbfdf040acfcbc891d1343f89e6f963bf4fec84936f9fe48ab075cea24271ead6"], 0x0, 0x0, 0x0, 0x0}) 12.383615993s ago: executing program 7 (id=1782): openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000008, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x818, 0x1a201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xa8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) 11.274892372s ago: executing program 7 (id=1783): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x20080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10e, 0x2, 0x8001}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x48e7, 0x0, 0xe3e3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 11.222589482s ago: executing program 2 (id=1784): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x2) msgctl$IPC_RMID(0x0, 0x0) 11.193546983s ago: executing program 4 (id=1785): socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) close(0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 10.0707767s ago: executing program 2 (id=1786): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 9.855654841s ago: executing program 3 (id=1787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f2013d8422dba4300b83f22ef26f30f1efc66660f38800a0f78ac7400660f21fc0f43dff32e0f08", 0x28}], 0x0, 0x2e, 0x0, 0x0) 9.147344272s ago: executing program 4 (id=1788): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.162724738s ago: executing program 5 (id=1789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xf8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvvHE22c02KXCASi2FFmUrWDtpaBtxKEVCcKqEKPclJE4UxYmj2Gk3UQXZvwAJIUDiBBcuSPwBSGglLhwRUiW4AlIRCMEWJDhAB9keJ8EZJ96tE+86v580O+/NeOb7njdvPON5GgdwaT0bEa9FxPtpmr4QEdPZ8kI2xUF7ar7uvftvLzenJNL0jb8lkWTLOvtKsvn1bLOJiPjqlyO+kZyMW9/b31iqVis7Wb3c2Nwu1/f2b61vLq1V1ipbCwvzLy++svjS4txA2nkjIl794p++9+2ffOnVX3zmrT/e/svNbzbTmsrWH2/HAxo7bWW76cWrE10b7DxksEdRsz3FTmWyv23unmM+AAD01jzH/1BEfDIiXojpuHL66SwAAADwGEo/PxX/SSLSfOM9lgMAAACPkUJrDGxSKGVjAaaiUCiV2mN4PxLXCtVavfHp1dru1kp7rOxMFAur69XKXDZWeCaKSbM+3yof1V/sqi9ExJMR8d3pyVa9tFyrrgz7yw8AAAC4JK53Xf//c7p9/Q8AAACMmJlhJwAAAACcO9f/AAAAMPpc/wMAAMBI+8rrrzen33d+/3rlzb3djdqbt1Yq9Y3S5u5yabm2s11aq9XWWs/s2zxrf9VabfuzsbV7p9yo1Bvl+t7+7c3a7lbj9npMXEiDAAAAgBOe/Pi93yURcfC5ydbUND7spIALMXZYSrJ5Tu//wxPt+bsXlBRwIa708Zp3r+Yvd54Aj7ex7gU9+joweorDTgAYuuSM9T0H7/w6m39isPkAAACDN/ux/Pv/Z10PRBwULiA94BzpxHB5dd3/T6eHlQhw4Vr3//sdyONkAUZKsa8RgMAo+8D3/8+Upg+UEAAAMHBTrSkplLKv96aiUCiVIm60fhagmKyuVytzEfFERPx2uni1WZ9vbZn0MUYAAAAAAAAAAAAAAAAAAAAAAAAAAIjWU7mTSAEAAICRFlH4c/LL9rP8Z6efn+r+fmA8+XfrJ4HHI+KtH77x/TtLjcbOfHP53w+XN36QLX9xGN9gAAAAAN061+mt+b+GnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+a9+28vd6Y+Xj45qLh//UJEzOTFH4uJ1nwiihFx7R9JjB3bLomIKwOIf3A3Ij6aFz9ppnUYMi/+IN6EM+LHTPYu5MW/PoD4cJndax5/Xsvrf4V4tjXP739jEf9Xf1i9j39xePy70qP/3+gzxlPv/KzcM/7diKfG8o8/nfhJj/jP9Rn/61/b3++1Lv1RxGzn86d1xDse4ahUbmxul+t7+7fWN5fWKmuVrYWF+ZcXX1l8aXGuvLperWT/5sb4ztM/f/+09l/L/fxLsmx6t//5nP3lfSb995079z/cqRycjH/zuZz4v/px9oqT8QtZnE9l5eb62U75oF0+7pmf/uaZ09q/ctT+4oP8/9/stdNuJzrK0/3+6QAA56C+t7+xVK1Wdka20LxKfwTSUHgEC98a6A7TNE2bfSpn1b2I6Gc/SQy4pYX8fI4KPY8Awz4yAQAAg3Z00j/sTAAAAAAAAAAAAAAAAAAAAODyuoinrHXHPHoEcjKIR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzE/wIAAP//uEzT3A==") write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f2013d8422dba4300b83f22ef26f30f1efc66660f38800a0f78ac7400660f21fc0f43dff32e0f08", 0x28}], 0x0, 0x2e, 0x0, 0x0) 8.044856516s ago: executing program 3 (id=1790): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) 8.014326794s ago: executing program 4 (id=1791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4000497, 0x0, &(0x7f00000001c0), 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000140)=""/73, &(0x7f00000000c0)=0x49) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r6 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.516962541s ago: executing program 5 (id=1792): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e4101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x1a0, 0xfffffffffffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 6.642753327s ago: executing program 2 (id=1793): socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r4 = socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 6.542281122s ago: executing program 7 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x12, 0xffffffffffffffff, 0xabb35000) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvvHE22c02KXCASi2FFmUrWDtpaBtxKEVCcKqEKPclJE4UxYmj2Gk3UQXZvwAJIUDiBBcuSPwBSGglLhwRUiW4AlIRCMEWJDhAB9keJ8EZJ96tE+86v580O+/NeOb7njdvPON5GgdwaT0bEa9FxPtpmr4QEdPZ8kI2xUF7ar7uvftvLzenJNL0jb8lkWTLOvtKsvn1bLOJiPjqlyO+kZyMW9/b31iqVis7Wb3c2Nwu1/f2b61vLq1V1ipbCwvzLy++svjS4txA2nkjIl794p++9+2ffOnVX3zmrT/e/svNbzbTmsrWH2/HAxo7bWW76cWrE10b7DxksEdRsz3FTmWyv23unmM+AAD01jzH/1BEfDIiXojpuHL66SwAAADwGEo/PxX/SSLSfOM9lgMAAACPkUJrDGxSKGVjAaaiUCiV2mN4PxLXCtVavfHp1dru1kp7rOxMFAur69XKXDZWeCaKSbM+3yof1V/sqi9ExJMR8d3pyVa9tFyrrgz7yw8AAAC4JK53Xf//c7p9/Q8AAACMmJlhJwAAAACcO9f/AAAAMPpc/wMAAMBI+8rrrzen33d+/3rlzb3djdqbt1Yq9Y3S5u5yabm2s11aq9XWWs/s2zxrf9VabfuzsbV7p9yo1Bvl+t7+7c3a7lbj9npMXEiDAAAAgBOe/Pi93yURcfC5ydbUND7spIALMXZYSrJ5Tu//wxPt+bsXlBRwIa708Zp3r+Yvd54Aj7ex7gU9+joweorDTgAYuuSM9T0H7/w6m39isPkAAACDN/ux/Pv/Z10PRBwULiA94BzpxHB5dd3/T6eHlQhw4Vr3//sdyONkAUZKsa8RgMAo+8D3/8+Upg+UEAAAMHBTrSkplLKv96aiUCiVIm60fhagmKyuVytzEfFERPx2uni1WZ9vbZn0MUYAAAAAAAAAAAAAAAAAAAAAAAAAAIjWU7mTSAEAAICRFlH4c/LL9rP8Z6efn+r+fmA8+XfrJ4HHI+KtH77x/TtLjcbOfHP53w+XN36QLX9xGN9gAAAAAN061+mt+b+GnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+a9+28vd6Y+Xj45qLh//UJEzOTFH4uJ1nwiihFx7R9JjB3bLomIKwOIf3A3Ij6aFz9ppnUYMi/+IN6EM+LHTPYu5MW/PoD4cJndax5/Xsvrf4V4tjXP739jEf9Xf1i9j39xePy70qP/3+gzxlPv/KzcM/7diKfG8o8/nfhJj/jP9Rn/61/b3++1Lv1RxGzn86d1xDse4ahUbmxul+t7+7fWN5fWKmuVrYWF+ZcXX1l8aXGuvLperWT/5sb4ztM/f/+09l/L/fxLsmx6t//5nP3lfSb995079z/cqRycjH/zuZz4v/px9oqT8QtZnE9l5eb62U75oF0+7pmf/uaZ09q/ctT+4oP8/9/stdNuJzrK0/3+6QAA56C+t7+xVK1Wdka20LxKfwTSUHgEC98a6A7TNE2bfSpn1b2I6Gc/SQy4pYX8fI4KPY8Awz4yAQAAg3Z00j/sTAAAAAAAAAAAAAAAAAAAAODyuoinrHXHPHoEcjKIR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzE/wIAAP//uEzT3A==") write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="0f2013d8422dba4300b83f22ef26f30f1efc66660f38800a0f78ac7400660f21fc0f43dff32e0f08", 0x28}], 0x0, 0x2e, 0x0, 0x0) 4.533489933s ago: executing program 7 (id=1795): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48010) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 4.462355684s ago: executing program 3 (id=1796): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x7a, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xffffffffffffffb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x2) msgctl$IPC_RMID(0x0, 0x0) 3.538707402s ago: executing program 4 (id=1797): fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x74, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r2, r3, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x400, 0x7cb}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='D\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x4) 3.186947464s ago: executing program 3 (id=1798): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.975750474s ago: executing program 5 (id=1799): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ftruncate(r1, 0x9) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000200)) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f12}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 2.661185983s ago: executing program 3 (id=1800): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23c, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setgroups(0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000009c0)={0x0, &(0x7f0000000980)}) lsetxattr$security_capability(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.156399491s ago: executing program 2 (id=1801): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 855.573826ms ago: executing program 3 (id=1802): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000000328bd700000000000ac1e4101000000000000000000000000ac1414aa0000000000000000000000004e230001000000000a0000002c"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x1a0, 0xfffffffffffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 87.282278ms ago: executing program 2 (id=1803): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) 0s ago: executing program 7 (id=1804): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) kernel console output (not intermixed with test programs): 83405.974:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9469 comm="syz.7.659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b01f8ebe9 code=0x0 [ 566.970198][ T1220] IPVS: starting estimator thread 0... [ 567.286427][ T9477] IPVS: using max 46 ests per chain, 110400 per kthread [ 568.441086][ T9489] loop4: detected capacity change from 0 to 256 [ 568.560704][ T9489] FAT-fs (loop4): Directory bread(block 64) failed [ 568.606407][ T9489] FAT-fs (loop4): Directory bread(block 65) failed [ 568.622332][ T9489] FAT-fs (loop4): Directory bread(block 66) failed [ 568.640879][ T9489] FAT-fs (loop4): Directory bread(block 67) failed [ 568.658467][ T9489] FAT-fs (loop4): Directory bread(block 68) failed [ 568.696354][ T9489] FAT-fs (loop4): Directory bread(block 69) failed [ 568.755025][ T9489] FAT-fs (loop4): Directory bread(block 70) failed [ 568.806729][ T9489] FAT-fs (loop4): Directory bread(block 71) failed [ 568.813514][ T9489] FAT-fs (loop4): Directory bread(block 72) failed [ 568.825047][ T9489] FAT-fs (loop4): Directory bread(block 73) failed [ 573.212230][ T30] audit: type=1326 audit(1757083412.334:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.7.667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b01f8ebe9 code=0x0 [ 573.483540][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 573.594697][ T9519] loop3: detected capacity change from 0 to 2048 [ 573.934446][ T9519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.110853][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 574.358148][ T9524] netlink: 9 bytes leftover after parsing attributes in process `syz.3.671'. [ 574.555735][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 574.639176][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 574.716400][ T5986] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 574.878217][ T5986] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 575.390245][ T5986] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.486992][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 575.534308][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.669'. [ 575.615493][ T5986] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.156769][ T5986] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 576.210123][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.309375][ T5986] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.327825][ T5986] usb 5-1: invalid MIDI out EP 0 [ 576.734082][ T9526] loop4: detected capacity change from 0 to 1024 [ 576.769104][ T8520] udevd[8520]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.892188][ T5986] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 576.973710][ T5986] usb 5-1: USB disconnect, device number 10 [ 577.734533][ T1220] hid_parser_main: 4 callbacks suppressed [ 577.734549][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.770408][ T1116] hfsplus: b-tree write err: -5, ino 4 [ 577.810410][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.841627][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.871178][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.909642][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.927353][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.944195][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.964333][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 577.994398][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 578.026416][ T5873] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 578.079620][ T1220] hid-generic 00A0:1006:0003.0005: unknown main item tag 0x0 [ 578.189553][ T1220] hid-generic 00A0:1006:0003.0005: hidraw0: HID v800000.01 Device [syz1] on syz0 [ 578.245887][ T5873] usb 3-1: config 0 has no interfaces? [ 578.251725][ T5873] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 578.263725][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.334825][ T5873] usb 3-1: config 0 descriptor?? [ 578.423469][ T9549] capability: warning: `syz.4.677' uses deprecated v2 capabilities in a way that may be insecure [ 578.703092][ T9560] netlink: 332 bytes leftover after parsing attributes in process `syz.3.680'. [ 579.531068][ T9542] loop7: detected capacity change from 0 to 32768 [ 580.688967][ T5987] usb 3-1: USB disconnect, device number 8 [ 580.794562][ T9563] loop4: detected capacity change from 0 to 256 [ 580.910356][ T9563] FAT-fs (loop4): Directory bread(block 64) failed [ 580.954753][ T9563] FAT-fs (loop4): Directory bread(block 65) failed [ 580.974897][ T9563] FAT-fs (loop4): Directory bread(block 66) failed [ 580.995681][ T9563] FAT-fs (loop4): Directory bread(block 67) failed [ 581.022791][ T9563] FAT-fs (loop4): Directory bread(block 68) failed [ 581.102855][ T9563] FAT-fs (loop4): Directory bread(block 69) failed [ 581.131276][ T9563] FAT-fs (loop4): Directory bread(block 70) failed [ 581.260126][ T9563] FAT-fs (loop4): Directory bread(block 71) failed [ 581.283315][ T9563] FAT-fs (loop4): Directory bread(block 72) failed [ 581.344203][ T9563] FAT-fs (loop4): Directory bread(block 73) failed [ 582.541514][ T9583] netlink: 332 bytes leftover after parsing attributes in process `syz.7.681'. [ 585.316536][ T9595] loop4: detected capacity change from 0 to 2048 [ 585.724601][ T9595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.784693][ T30] audit: type=1800 audit(1757083424.904:383): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.688" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 587.465517][ T9602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.691'. [ 589.614376][ T9617] loop3: detected capacity change from 0 to 1024 [ 591.744032][ T9626] loop4: detected capacity change from 0 to 256 [ 592.051823][ T9626] FAT-fs (loop4): Directory bread(block 64) failed [ 592.369559][ T9631] loop7: detected capacity change from 0 to 1024 [ 592.396635][ T9626] FAT-fs (loop4): Directory bread(block 65) failed [ 592.403317][ T9626] FAT-fs (loop4): Directory bread(block 66) failed [ 592.603740][ T9626] FAT-fs (loop4): Directory bread(block 67) failed [ 592.725954][ T9626] FAT-fs (loop4): Directory bread(block 68) failed [ 592.753119][ T9626] FAT-fs (loop4): Directory bread(block 69) failed [ 592.984038][ T9626] FAT-fs (loop4): Directory bread(block 70) failed [ 593.194013][ T9626] FAT-fs (loop4): Directory bread(block 71) failed [ 593.200958][ T9626] FAT-fs (loop4): Directory bread(block 72) failed [ 593.207611][ T9626] FAT-fs (loop4): Directory bread(block 73) failed [ 594.076371][ T1220] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 594.248152][ T1220] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 594.258670][ T1220] usb 4-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 594.333649][ T1220] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 594.351927][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.414585][ T5951] usb 4-1: USB disconnect, device number 5 [ 596.908467][ T9669] netlink: 332 bytes leftover after parsing attributes in process `syz.3.707'. [ 597.647443][ T9677] program syz.5.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.083135][ T9689] netlink: 332 bytes leftover after parsing attributes in process `syz.5.711'. [ 600.599927][ T9702] loop2: detected capacity change from 0 to 2048 [ 601.350025][ T9702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.826428][ T30] audit: type=1800 audit(1757083440.914:384): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.715" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 602.194815][ T9715] loop4: detected capacity change from 0 to 1024 [ 606.825246][ T9749] loop6: detected capacity change from 0 to 7 [ 606.866006][ T8109] Dev loop6: unable to read RDB block 7 [ 606.873152][ T8109] loop6: unable to read partition table [ 606.880242][ T8109] loop6: partition table beyond EOD, truncated [ 606.890734][ T9749] Dev loop6: unable to read RDB block 7 [ 606.899833][ T9749] loop6: unable to read partition table [ 606.911789][ T9749] loop6: partition table beyond EOD, truncated [ 606.928374][ T9749] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 610.021041][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.736'. [ 612.821579][ T9787] netlink: 332 bytes leftover after parsing attributes in process `syz.3.735'. [ 613.248531][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.741'. [ 613.596508][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.741'. [ 616.238911][ T9833] netlink: 332 bytes leftover after parsing attributes in process `syz.3.746'. [ 616.248852][ T9832] 9pnet_fd: Insufficient options for proto=fd [ 618.607685][ T9859] netlink: 332 bytes leftover after parsing attributes in process `syz.7.753'. [ 621.992300][ T9914] program syz.5.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.247105][ T9943] erofs (device nbd4): cannot find valid erofs superblock [ 624.863321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.869713][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.399707][ T9949] loop4: detected capacity change from 0 to 32768 [ 625.410697][ T9949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.769 (9949) [ 625.467429][ T9949] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.477816][ T9949] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 625.954889][ T9949] BTRFS info (device loop4): enabling ssd optimizations [ 625.961976][ T9949] BTRFS info (device loop4): enabling free space tree [ 626.273013][ T5866] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.346352][ T5931] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 626.547231][ T5931] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 626.596417][ T5931] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.640679][ T5931] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.689218][ T5931] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.886381][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.997502][ T5931] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.031554][ T5931] usb 6-1: invalid MIDI out EP 0 [ 627.172171][ T9967] loop5: detected capacity change from 0 to 1024 [ 628.072383][ T5931] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 628.226564][ T5931] usb 6-1: USB disconnect, device number 7 [ 628.633262][ T44] hfsplus: b-tree write err: -5, ino 4 [ 628.910181][ T9987] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.776'. [ 630.431337][T10004] loop4: detected capacity change from 0 to 32768 [ 630.656361][T10004] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.781 (10004) [ 630.833180][T10004] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 630.843426][T10004] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 631.110233][T10004] BTRFS info (device loop4): enabling ssd optimizations [ 631.117416][T10004] BTRFS info (device loop4): enabling free space tree [ 631.423427][ T5866] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 632.335681][T10036] loop4: detected capacity change from 0 to 512 [ 632.427150][T10036] EXT4-fs: Ignoring removed mblk_io_submit option [ 632.497091][T10036] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 632.525499][T10036] EXT4-fs (loop4): DAX unsupported by block device. [ 633.911501][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 634.557723][ T5986] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 634.735259][T10052] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.790'. [ 634.794042][ T5986] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 634.835450][ T5986] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.973276][T10055] loop5: detected capacity change from 0 to 2048 [ 634.984007][T10055] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 635.009329][ T5986] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.056423][ T5986] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.082416][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.084994][T10055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 635.281063][ T5986] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.303510][ T5986] usb 3-1: invalid MIDI out EP 0 [ 636.271120][T10045] loop2: detected capacity change from 0 to 1024 [ 636.783070][T10066] loop7: detected capacity change from 0 to 32768 [ 636.876301][T10066] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.794 (10066) [ 636.893642][T10066] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 636.903856][T10066] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 637.627958][ T5986] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 637.675087][ T8513] udevd[8513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.692450][ T5986] usb 3-1: USB disconnect, device number 9 [ 637.822787][T10066] BTRFS info (device loop7): enabling ssd optimizations [ 637.829874][T10066] BTRFS info (device loop7): enabling free space tree [ 637.948027][ T7872] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 638.325615][ T1166] hfsplus: b-tree write err: -5, ino 4 [ 638.617776][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 639.383926][T10107] netlink: 332 bytes leftover after parsing attributes in process `syz.4.800'. [ 639.481437][T10104] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.802'. [ 639.485573][T10109] loop3: detected capacity change from 0 to 128 [ 639.506310][T10109] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 639.516547][ T5987] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 639.519819][T10109] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 639.531785][T10090] loop5: detected capacity change from 0 to 32768 [ 639.726576][ T5987] usb 8-1: Using ep0 maxpacket: 32 [ 639.742582][ T5987] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 639.753928][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.763098][ T30] audit: type=1326 audit(1757083478.894:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 639.851529][ T30] audit: type=1326 audit(1757083478.894:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 639.901959][ T5987] usb 8-1: config 0 descriptor?? [ 639.920126][ T30] audit: type=1326 audit(1757083478.904:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 639.928053][ T5987] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 640.164810][ T30] audit: type=1326 audit(1757083478.904:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 640.401002][ T30] audit: type=1326 audit(1757083478.904:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 640.425537][ T30] audit: type=1326 audit(1757083478.914:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 640.492462][ T30] audit: type=1326 audit(1757083478.914:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 640.639180][T10115] erofs (device nbd2): cannot find valid erofs superblock [ 641.059390][ T5987] gspca_vc032x: reg_w err -110 [ 641.064193][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.099206][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.135174][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.201409][ T30] audit: type=1326 audit(1757083478.914:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 641.223787][ T30] audit: type=1326 audit(1757083478.914:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 641.243299][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.276448][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.296799][ T30] audit: type=1326 audit(1757083478.914:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10108 comm="syz.3.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 641.321133][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.360241][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.365593][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 641.479992][T10122] loop6: detected capacity change from 0 to 7 [ 642.489609][T10122] Dev loop6: unable to read RDB block 7 [ 642.496802][T10122] loop6: unable to read partition table [ 642.545776][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.578941][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.602287][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.636493][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.678237][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.690491][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.690759][T10122] loop6: partition table beyond EOD, [ 642.695826][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.695842][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.695852][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.695861][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 642.695872][ T5987] gspca_vc032x: Unknown sensor... [ 642.953721][T10122] truncated [ 643.013022][T10122] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 643.026646][ T5987] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 643.116089][ T5987] usb 8-1: USB disconnect, device number 7 [ 644.881868][T10156] loop5: detected capacity change from 0 to 256 [ 645.417611][T10151] nvme_fabrics: missing parameter 'transport=%s' [ 645.465164][T10151] nvme_fabrics: missing parameter 'nqn=%s' [ 645.788993][T10164] exFAT-fs (loop5): start_clu is invalid cluster(0x400) [ 647.983893][T10178] loop5: detected capacity change from 0 to 1024 [ 647.996586][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 648.937352][ T43] usb 3-1: config 0 has no interfaces? [ 648.945605][T10184] netlink: 'syz.7.823': attribute type 2 has an invalid length. [ 648.961957][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 648.976442][T10184] netlink: 'syz.7.823': attribute type 1 has an invalid length. [ 649.006291][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.024528][ T43] usb 3-1: Product: syz [ 649.033120][ T43] usb 3-1: Manufacturer: syz [ 649.041027][ T43] usb 3-1: SerialNumber: syz [ 649.070444][ T43] usb 3-1: config 0 descriptor?? [ 649.506360][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 649.506380][ T30] audit: type=1326 audit(1757083488.624:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.4.826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6af858ebe9 code=0x0 [ 649.782224][T10205] 9pnet_fd: Insufficient options for proto=fd [ 650.147781][ T5873] IPVS: starting estimator thread 0... [ 650.260448][T10200] nvme_fabrics: missing parameter 'transport=%s' [ 650.422791][T10200] nvme_fabrics: missing parameter 'nqn=%s' [ 650.440282][T10210] IPVS: using max 32 ests per chain, 76800 per kthread [ 651.177020][ T5986] usb 3-1: USB disconnect, device number 10 [ 651.995980][ T30] audit: type=1326 audit(1757083491.114:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.5.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7298ebe9 code=0x0 [ 652.253133][ T5987] IPVS: starting estimator thread 0... [ 652.320198][T10220] nvme_fabrics: missing parameter 'transport=%s' [ 652.327073][T10220] nvme_fabrics: missing parameter 'nqn=%s' [ 652.346808][T10223] IPVS: using max 27 ests per chain, 64800 per kthread [ 654.331457][T10234] kvm: pic: non byte write [ 654.452291][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 654.500825][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 655.098104][T10252] netlink: 332 bytes leftover after parsing attributes in process `syz.3.836'. [ 655.259285][T10251] loop2: detected capacity change from 0 to 1024 [ 658.529692][T10279] loop6: detected capacity change from 0 to 7 [ 658.547746][T10279] Dev loop6: unable to read RDB block 7 [ 658.566514][T10279] loop6: unable to read partition table [ 658.766756][T10279] loop6: partition table beyond EOD, truncated [ 658.781087][T10279] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.757477][T10293] 9pnet_fd: Insufficient options for proto=fd [ 660.189756][ T30] audit: type=1326 audit(1757083499.244:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.2.851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34af8ebe9 code=0x0 [ 660.658716][T10302] nvme_fabrics: missing parameter 'transport=%s' [ 660.726469][T10302] nvme_fabrics: missing parameter 'nqn=%s' [ 664.305129][T10333] 9pnet_fd: Insufficient options for proto=fd [ 666.506351][ T5873] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 666.817052][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.841041][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.890557][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.911056][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.157986][ T5873] usb 5-1: Product: syz [ 667.163056][ T5873] usb 5-1: Manufacturer: syz [ 667.317410][ T5873] usb 5-1: SerialNumber: syz [ 667.376444][ T5931] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 667.588906][ T5931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.614572][T10358] kvm: pic: non byte write [ 667.624355][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 667.678812][ T5931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 667.690006][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.698461][ T5931] usb 6-1: Product: syz [ 667.702823][ T5931] usb 6-1: Manufacturer: syz [ 667.711783][ T5931] usb 6-1: SerialNumber: syz [ 667.785733][ T5873] usb 5-1: 0:2 : does not exist [ 667.999593][ T5873] usb 5-1: USB disconnect, device number 11 [ 668.345555][ T5931] usb 6-1: 0:2 : does not exist [ 668.594599][ T5931] usb 6-1: USB disconnect, device number 8 [ 668.669217][ T8109] udevd[8109]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 668.869156][ T8479] udevd[8479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.415542][T10382] netlink: 332 bytes leftover after parsing attributes in process `syz.4.871'. [ 670.346336][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 670.535403][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.547494][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.606616][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.686425][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.774911][ T24] usb 6-1: config 0 descriptor?? [ 673.236050][ T5873] usb 6-1: USB disconnect, device number 9 [ 678.626149][T10459] loop7: detected capacity change from 0 to 256 [ 679.107971][T10462] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 680.209842][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.894'. [ 681.614837][T10481] 9pnet_fd: Insufficient options for proto=fd [ 681.903853][T10486] syz_tun: entered allmulticast mode [ 683.724595][T10496] 9pnet_fd: Insufficient options for proto=fd [ 684.161569][T10499] loop4: detected capacity change from 0 to 32768 [ 684.181439][T10499] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.903 (10499) [ 684.239577][T10499] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 684.251246][T10499] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 684.519688][T10499] BTRFS info (device loop4): enabling ssd optimizations [ 684.526949][T10499] BTRFS info (device loop4): enabling free space tree [ 685.282673][ T5866] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 686.043514][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.049937][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.575624][T10538] kvm: pic: non byte write [ 690.792708][T10569] loop4: detected capacity change from 0 to 32768 [ 690.828934][T10569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.917 (10569) [ 690.849297][T10569] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 690.859796][T10569] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 691.006679][T10569] BTRFS info (device loop4): enabling ssd optimizations [ 691.013656][T10569] BTRFS info (device loop4): enabling free space tree [ 691.660144][T10593] serio: Serial port ptm0 [ 693.705869][ T5866] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 694.442434][T10607] netlink: 332 bytes leftover after parsing attributes in process `syz.5.921'. [ 697.205465][T10638] loop7: detected capacity change from 0 to 32768 [ 697.659159][T10638] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.929 (10638) [ 697.689174][T10638] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 697.699364][T10638] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 698.117631][T10638] BTRFS info (device loop7): enabling ssd optimizations [ 698.124669][T10638] BTRFS info (device loop7): enabling free space tree [ 698.648695][ T7872] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 702.727855][T10699] loop3: detected capacity change from 0 to 32768 [ 702.771347][T10699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.940 (10699) [ 702.800568][T10699] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 702.810835][T10699] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 703.169166][T10699] BTRFS info (device loop3): enabling ssd optimizations [ 703.176381][T10699] BTRFS info (device loop3): enabling free space tree [ 703.854496][ T5865] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 704.267516][ T30] audit: type=1326 audit(1757083543.394:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.7.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b01f8ebe9 code=0x0 [ 704.581943][T10734] nvme_fabrics: missing parameter 'transport=%s' [ 704.590607][T10734] nvme_fabrics: missing parameter 'nqn=%s' [ 704.678258][T10740] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 704.678258][T10740] The task syz.2.947 (10740) triggered the difference, watch for misbehavior. [ 705.170598][ T5931] hid_parser_main: 5 callbacks suppressed [ 705.170620][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.192160][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.226133][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.265647][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.476675][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.487933][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.500278][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.513240][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.523052][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.673431][T10449] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 705.702860][ T5931] hid-generic 00A0:1006:0003.0006: unknown main item tag 0x0 [ 705.771777][ T5931] hid-generic 00A0:1006:0003.0006: hidraw0: HID v800000.01 Device [syz1] on syz0 [ 706.062256][T10449] usb 4-1: config 0 has no interfaces? [ 706.072053][T10449] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 706.276042][T10449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.318101][T10449] usb 4-1: config 0 descriptor?? [ 706.342598][T10759] netlink: 'syz.2.950': attribute type 2 has an invalid length. [ 706.350398][T10759] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 708.526356][ T5986] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 708.882096][ T5986] usb 6-1: config 0 has no interfaces? [ 709.006536][ T5986] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 709.037466][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.050076][ T5986] usb 6-1: Product: syz [ 709.054256][ T5986] usb 6-1: Manufacturer: syz [ 709.071355][ T5986] usb 6-1: SerialNumber: syz [ 709.087310][ T5986] usb 6-1: config 0 descriptor?? [ 709.252122][T10778] loop2: detected capacity change from 0 to 32768 [ 709.281424][T10778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.955 (10778) [ 709.299399][T10778] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 709.309611][T10778] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 709.927054][T10778] BTRFS info (device loop2): enabling ssd optimizations [ 709.934111][T10778] BTRFS info (device loop2): enabling free space tree [ 710.683594][ T5869] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 710.886905][ T5986] usb 4-1: USB disconnect, device number 6 [ 714.473514][T10817] loop2: detected capacity change from 0 to 256 [ 714.565617][ T5873] usb 6-1: USB disconnect, device number 10 [ 714.941498][T10824] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 721.783079][ T30] audit: type=1326 audit(1757083560.904:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.3.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b918ebe9 code=0x0 [ 721.822343][T10887] loop5: detected capacity change from 0 to 736 [ 723.397087][T10449] IPVS: starting estimator thread 0... [ 723.496841][T10900] IPVS: using max 46 ests per chain, 110400 per kthread [ 723.609161][T10902] netlink: 332 bytes leftover after parsing attributes in process `syz.4.979'. [ 723.751200][T10892] nvme_fabrics: missing parameter 'transport=%s' [ 723.757877][T10892] nvme_fabrics: missing parameter 'nqn=%s' [ 726.886750][ T5951] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 727.047180][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 727.658099][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 727.696840][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 728.044187][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 728.053879][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.128117][ T5951] usb 5-1: Product: syz [ 728.136556][ T5951] usb 5-1: Manufacturer: syz [ 728.155705][ T5951] usb 5-1: SerialNumber: syz [ 728.187631][ T5951] usb 5-1: config 0 descriptor?? [ 728.222180][ T5951] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 728.256533][ T5951] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 728.829672][ T5951] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 729.055935][ T5951] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 729.084171][ T5951] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 729.093448][ T5951] em28xx 5-1:0.0: No AC97 audio processor [ 729.123970][ T5951] usb 5-1: USB disconnect, device number 12 [ 729.134902][ T5951] em28xx 5-1:0.0: Disconnecting em28xx [ 729.156990][ T5951] em28xx 5-1:0.0: Freeing device [ 729.324361][T10944] loop5: detected capacity change from 0 to 128 [ 729.354258][T10944] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 729.419663][T10944] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 729.452837][ T8479] udevd[8479]: incorrect jbd checksum on /dev/loop5 [ 729.868239][T10946] loop5: detected capacity change from 0 to 1024 [ 729.946377][ T30] audit: type=1326 audit(1757083568.884:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 730.496823][ T30] audit: type=1326 audit(1757083568.884:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 730.799718][ T30] audit: type=1326 audit(1757083568.884:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 730.893587][ T30] audit: type=1326 audit(1757083568.884:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 730.997943][ T30] audit: type=1326 audit(1757083568.894:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.145697][ T30] audit: type=1326 audit(1757083568.894:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.168080][ T30] audit: type=1326 audit(1757083568.894:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.540412][ T30] audit: type=1326 audit(1757083568.894:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.670871][ T30] audit: type=1326 audit(1757083568.894:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.782214][T10449] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 731.810972][ T30] audit: type=1326 audit(1757083568.894:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10943 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 731.948889][T10449] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 731.963776][T10449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.982244][T10449] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 731.997480][T10449] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 732.005671][T10449] usb 4-1: Manufacturer: syz [ 732.028561][T10449] usb 4-1: config 0 descriptor?? [ 732.936301][T10449] rc_core: IR keymap rc-hauppauge not found [ 732.945736][T10449] Registered IR keymap rc-empty [ 732.998209][T10449] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 733.053257][T10449] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 733.193977][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 733.210349][T10449] usb 4-1: USB disconnect, device number 7 [ 733.476551][T10970] loop7: detected capacity change from 0 to 2048 [ 741.304210][T11024] loop2: detected capacity change from 0 to 2048 [ 742.035974][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 742.266527][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 742.287179][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 742.426740][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 742.459518][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 742.496387][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 742.546895][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 742.586246][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 742.631688][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 742.668991][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.726893][ T24] usb 5-1: config 0 descriptor?? [ 742.972950][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 743.111065][T11040] fuse: Bad value for 'fd' [ 743.423655][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 743.871571][T11053] loop2: detected capacity change from 0 to 2048 [ 744.298512][T11053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.428244][ T24] usb 5-1: USB disconnect, device number 13 [ 744.495932][ T24] usblp0: removed [ 747.579589][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.596863][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.663844][T11079] loop2: detected capacity change from 0 to 2048 [ 749.885173][T11100] fuse: Bad value for 'fd' [ 751.973460][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 751.973483][ T30] audit: type=1326 audit(1757083591.084:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.4.1029" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6af858ebe9 code=0x0 [ 752.058567][T11121] loop7: detected capacity change from 0 to 2048 [ 752.076755][T11121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.293180][T11122] nvme_fabrics: missing parameter 'transport=%s' [ 752.351907][T11122] nvme_fabrics: missing parameter 'nqn=%s' [ 753.901701][T11134] loop3: detected capacity change from 0 to 2048 [ 755.335858][T11141] loop3: detected capacity change from 0 to 1024 [ 755.556877][T11144] fuse: Bad value for 'fd' [ 759.317099][T11180] loop2: detected capacity change from 0 to 2048 [ 761.633117][T11198] loop4: detected capacity change from 0 to 1024 [ 763.799784][T11219] loop3: detected capacity change from 0 to 2048 [ 763.850516][T11219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.296069][T11236] loop4: detected capacity change from 0 to 736 [ 768.222160][T11246] loop7: detected capacity change from 0 to 1024 [ 771.905406][T11275] loop3: detected capacity change from 0 to 2048 [ 771.925917][T11275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.430925][T11291] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1069'. [ 774.456327][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 774.584428][T11295] loop7: detected capacity change from 0 to 736 [ 774.636713][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.746327][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.830867][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 774.849820][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.862009][ T24] usb 5-1: config 0 descriptor?? [ 775.363182][ T24] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 775.509748][ T24] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 775.528933][ T24] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 775.601790][ T24] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -32 [ 775.714829][ T24] usb 5-1: USB disconnect, device number 14 [ 778.694528][T11326] loop4: detected capacity change from 0 to 2048 [ 778.715908][T11326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.127142][T11331] tipc: Started in network mode [ 779.153195][T11331] tipc: Node identity 9e909ace00cf, cluster identity 4711 [ 779.182601][T11331] tipc: Enabled bearer , priority 0 [ 779.282839][T11336] syzkaller0: entered promiscuous mode [ 779.317894][T11336] syzkaller0: entered allmulticast mode [ 779.433901][T11331] tipc: Resetting bearer [ 779.506688][T11330] tipc: Resetting bearer [ 779.605144][T11330] tipc: Disabling bearer [ 780.346260][ T5931] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 780.520323][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.618067][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.695252][ T5931] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 780.708988][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.734220][ T5931] usb 6-1: config 0 descriptor?? [ 781.414765][ T5931] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 781.717162][T11364] loop4: detected capacity change from 0 to 2048 [ 781.731961][T11364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 781.744222][ T5931] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 781.853171][ T5931] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 781.970067][ T5931] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -32 [ 782.063403][ T5931] usb 6-1: USB disconnect, device number 11 [ 782.216795][T11376] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1095'. [ 784.826278][T10449] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 785.113631][T10449] usb 6-1: config 0 interface 0 has no altsetting 0 [ 785.120821][T10449] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 785.130316][T10449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.193466][T11409] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1103'. [ 785.203276][T11409] openvswitch: netlink: Message has 512 unknown bytes. [ 785.274971][T10449] usb 6-1: config 0 descriptor?? [ 785.526471][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 785.720439][ T24] usb 8-1: config 0 has no interfaces? [ 785.734510][ T24] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 785.744224][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.752532][ T24] usb 8-1: Product: syz [ 785.757418][ T24] usb 8-1: Manufacturer: syz [ 785.762196][ T24] usb 8-1: SerialNumber: syz [ 785.818102][ T24] usb 8-1: config 0 descriptor?? [ 786.021313][T10449] elecom 0003:056E:010C.0009: item fetching failed at offset 0/3 [ 786.150001][T10449] elecom 0003:056E:010C.0009: probe with driver elecom failed with error -22 [ 786.205827][T10449] usb 6-1: USB disconnect, device number 12 [ 787.011420][T11418] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1107'. [ 787.329363][T11429] fuse: Bad value for 'fd' [ 788.820323][T10449] usb 8-1: USB disconnect, device number 8 [ 789.976337][ T1220] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 790.128464][ T1220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.159930][ T1220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.249416][ T1220] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 790.290531][ T1220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.393664][ T1220] usb 8-1: config 0 descriptor?? [ 790.986486][ T1220] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 791.408973][ T1220] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 791.482169][ T1220] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 791.517424][ T1220] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 791.756314][ T1220] usb 8-1: USB disconnect, device number 9 [ 792.131865][T11472] fuse: Bad value for 'fd' [ 792.484415][T11479] 9pnet_fd: Insufficient options for proto=fd [ 797.841320][T11504] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1130'. [ 799.018919][T11513] loop2: detected capacity change from 0 to 1024 [ 804.803139][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 804.988963][T11550] syz_tun (unregistering): left allmulticast mode [ 805.801874][ T1220] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 806.924672][T11568] loop5: detected capacity change from 0 to 1024 [ 806.951813][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 807.009070][ T1220] usb 4-1: config 0 has no interfaces? [ 807.257329][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.945659][ T1220] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 808.002089][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.056372][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.157110][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 808.198669][ T1220] usb 4-1: Product: syz [ 808.238273][ T1220] usb 4-1: Manufacturer: syz [ 808.264354][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.276679][ T1220] usb 4-1: SerialNumber: syz [ 808.413982][ T1220] usb 4-1: config 0 descriptor?? [ 808.458365][ T24] usb 5-1: config 0 descriptor?? [ 808.933976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.943216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.971921][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 809.604407][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 809.746598][ T24] usb 5-1: USB disconnect, device number 15 [ 811.041217][ T1220] usb 4-1: can't set config #0, error -71 [ 811.072018][ T1220] usb 4-1: USB disconnect, device number 8 [ 812.477120][T11599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1152'. [ 813.186438][ T5873] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 813.368822][ T5873] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 813.405058][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.418754][ T5873] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 813.459608][T11615] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1157'. [ 813.505749][ T5873] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 813.522741][ T5873] usb 6-1: Manufacturer: syz [ 813.578375][ T5873] usb 6-1: config 0 descriptor?? [ 813.646696][T11620] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1159'. [ 814.496905][ T5873] rc_core: IR keymap rc-hauppauge not found [ 814.502870][ T5873] Registered IR keymap rc-empty [ 814.519402][ T5873] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 814.657432][ T5873] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 814.883675][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 814.903504][ T5873] usb 6-1: USB disconnect, device number 13 [ 822.603237][ T1220] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 822.767451][T11693] netlink: 'syz.3.1176': attribute type 2 has an invalid length. [ 822.775298][T11693] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 823.071180][ T1220] usb 3-1: config 0 has no interfaces? [ 823.090177][ T1220] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 823.102110][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.180309][ T1220] usb 3-1: Product: syz [ 823.218434][ T1220] usb 3-1: Manufacturer: syz [ 823.240010][ T1220] usb 3-1: SerialNumber: syz [ 823.318395][ T1220] usb 3-1: config 0 descriptor?? [ 826.008894][ T5986] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 826.385735][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.436829][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.494891][ T5986] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 826.546347][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.586441][ T5986] usb 4-1: config 0 descriptor?? [ 826.603984][ T1220] usb 3-1: USB disconnect, device number 11 [ 827.162489][ T5986] usbhid 4-1:0.0: can't add hid device: -71 [ 827.168799][ T5986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 827.207356][ T1220] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 827.217868][ T5986] usb 4-1: USB disconnect, device number 9 [ 827.506429][ T1220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.527828][ T1220] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 827.615853][ T1220] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 827.666723][ T1220] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.682210][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.740186][ T1220] usb 3-1: Product: syz [ 827.890497][T11726] 9pnet_fd: Insufficient options for proto=fd [ 827.998662][ T1220] usb 3-1: Manufacturer: syz [ 828.023116][ T1220] usb 3-1: SerialNumber: syz [ 828.680600][T11721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.310678][T11721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 829.543498][ T1220] cdc_mbim 3-1:1.0: bind() failure [ 829.641308][ T1220] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 829.654352][ T1220] cdc_ncm 3-1:1.1: bind() failure [ 830.796991][ T1220] usb 3-1: USB disconnect, device number 12 [ 832.966288][ T5987] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 833.188197][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.267763][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.406822][ T5987] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 833.418989][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.435017][ T5987] usb 5-1: config 0 descriptor?? [ 833.875072][ T5987] usbhid 5-1:0.0: can't add hid device: -71 [ 833.890396][ T5987] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 833.937674][ T5987] usb 5-1: USB disconnect, device number 16 [ 835.194476][ T5931] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 835.391687][T11778] 9pnet_fd: Insufficient options for proto=fd [ 835.843096][T11783] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1200'. [ 835.852721][T11783] openvswitch: netlink: Message has 512 unknown bytes. [ 835.933293][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.985090][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.188192][ T5931] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 836.215897][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.357474][T11785] loop3: detected capacity change from 0 to 736 [ 836.397671][ T5931] usb 3-1: config 0 descriptor?? [ 837.052000][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 837.090934][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 837.130978][ T5931] usb 3-1: USB disconnect, device number 13 [ 841.950608][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 843.146389][ T5982] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 843.323959][ T5982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.336052][ T5982] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 843.375346][ T5982] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.506415][ T5982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.536352][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.611813][ T5982] usb 4-1: Product: syz [ 843.686260][T11838] 9pnet_fd: Insufficient options for proto=fd [ 844.061120][ T5982] usb 4-1: Manufacturer: syz [ 844.072341][ T5982] usb 4-1: SerialNumber: syz [ 844.511271][T11824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 845.217903][T11824] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 845.430390][ T5982] cdc_mbim 4-1:1.0: bind() failure [ 845.441753][ T5982] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 845.449348][ T5982] cdc_ncm 4-1:1.1: bind() failure [ 846.141670][T11850] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1216'. [ 847.802993][ T1220] usb 4-1: USB disconnect, device number 10 [ 849.117298][T11869] 9pnet_fd: Insufficient options for proto=fd [ 851.557189][T11903] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1226'. [ 851.568364][T11903] openvswitch: netlink: Message has 512 unknown bytes. [ 853.260921][T11924] 9pnet_fd: Insufficient options for proto=fd [ 853.977240][ T5873] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 854.137621][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 854.152552][ T5873] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 854.162193][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.184941][ T5873] usb 6-1: Product: syz [ 854.546014][ T5873] usb 6-1: Manufacturer: syz [ 854.566217][ T5873] usb 6-1: SerialNumber: syz [ 854.602205][ T5873] usb 6-1: config 0 descriptor?? [ 854.630241][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 855.234955][ T30] audit: type=1326 audit(1757083694.354:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.5.1231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x0 [ 855.288051][ T5873] gspca_ov534_9: reg_w failed -71 [ 855.586453][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 855.586527][ T5873] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 855.655832][ T5873] usb 6-1: USB disconnect, device number 14 [ 856.416764][T11968] netlink: 'syz.5.1237': attribute type 2 has an invalid length. [ 856.424629][T11968] netlink: 'syz.5.1237': attribute type 1 has an invalid length. [ 858.507900][T11982] loop2: detected capacity change from 0 to 736 [ 860.303813][T12010] loop2: detected capacity change from 0 to 1024 [ 860.566292][T12014] loop7: detected capacity change from 0 to 1024 [ 866.220914][ T5873] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 866.893469][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.904981][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.166580][ T5873] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 867.176346][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.189301][ T5873] usb 3-1: config 0 descriptor?? [ 867.684287][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 867.724525][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 868.255183][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1263'. [ 868.295195][ T5873] usb 3-1: USB disconnect, device number 14 [ 869.008647][T12106] loop5: detected capacity change from 0 to 128 [ 869.075769][T12106] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 869.120832][T12106] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 869.581481][T12116] loop5: detected capacity change from 0 to 1024 [ 870.040805][ T30] audit: type=1326 audit(1757083708.604:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.070783][ T30] audit: type=1326 audit(1757083708.604:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.094049][ T30] audit: type=1326 audit(1757083708.604:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.235899][ T30] audit: type=1326 audit(1757083708.604:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.408240][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.414648][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.549673][ T30] audit: type=1326 audit(1757083708.614:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.552454][T12120] loop4: detected capacity change from 0 to 1024 [ 870.720098][ T30] audit: type=1326 audit(1757083708.614:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.857678][ T30] audit: type=1326 audit(1757083708.614:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 870.986227][ T30] audit: type=1326 audit(1757083708.614:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 871.606302][ T30] audit: type=1326 audit(1757083708.614:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 871.654183][ T30] audit: type=1326 audit(1757083708.614:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12105 comm="syz.5.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f1b7298ebe9 code=0x7ffc0000 [ 871.890441][T12137] fuse: Bad value for 'group_id' [ 871.944015][T12137] fuse: Bad value for 'group_id' [ 874.340654][T12155] tipc: Enabled bearer , priority 0 [ 874.399670][ T5982] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 874.433244][T12155] syzkaller0: entered promiscuous mode [ 874.445082][T12155] syzkaller0: entered allmulticast mode [ 874.520047][T12155] tipc: Resetting bearer [ 874.544715][T12154] tipc: Resetting bearer [ 874.766221][ T5982] usb 8-1: Using ep0 maxpacket: 32 [ 874.780426][ T5982] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 874.792839][ T5982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.828572][ T5982] usb 8-1: Product: syz [ 874.847002][ T5982] usb 8-1: Manufacturer: syz [ 874.885650][ T5982] usb 8-1: SerialNumber: syz [ 874.896088][T12154] tipc: Disabling bearer [ 874.940061][ T5982] usb 8-1: config 0 descriptor?? [ 874.955487][ T5982] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 875.260149][T12167] fuse: Unknown parameter 'grou00000000000000000000' [ 875.372445][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 875.372463][ T30] audit: type=1326 audit(1757083714.494:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.7.1280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b01f8ebe9 code=0x0 [ 875.431164][ T5982] gspca_ov534_9: reg_w failed -71 [ 875.666362][T12172] loop4: detected capacity change from 0 to 736 [ 875.718783][T12174] loop2: detected capacity change from 0 to 1024 [ 875.910044][ T5982] gspca_ov534_9: Unknown sensor 0000 [ 875.910157][ T5982] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 876.134842][ T5982] usb 8-1: USB disconnect, device number 10 [ 876.954487][T12182] loop3: detected capacity change from 0 to 1024 [ 876.973017][T12181] loop7: detected capacity change from 0 to 1024 [ 879.923923][T12216] loop5: detected capacity change from 0 to 512 [ 879.956176][T12216] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 879.967127][T12216] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 880.050499][T12216] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 882.611825][T12231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 882.936237][ T1220] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 882.981762][T12233] loop2: detected capacity change from 0 to 736 [ 883.159320][T12235] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1302'. [ 883.206248][ T1220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 883.276341][ T1220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 883.366223][ T1220] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.458371][ T1220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 883.485480][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.516441][ T1220] usb 5-1: Product: syz [ 883.520680][ T1220] usb 5-1: Manufacturer: syz [ 883.530178][ T1220] usb 5-1: SerialNumber: syz [ 883.554922][ T1220] hub 5-1:1.0: bad descriptor, ignoring hub [ 883.572266][ T1220] hub 5-1:1.0: probe with driver hub failed with error -5 [ 883.791481][ T1220] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 886.320960][T12260] loop3: detected capacity change from 0 to 128 [ 886.419403][T12260] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 886.459628][ T8109] udevd[8109]: incorrect jbd checksum on /dev/loop3 [ 886.547791][ T8109] udevd[8109]: incorrect jbd checksum on /dev/loop3 [ 886.554710][T12260] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 887.055182][T12262] loop3: detected capacity change from 0 to 1024 [ 887.618724][ T30] audit: type=1326 audit(1757083726.074:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 887.743479][ T30] audit: type=1326 audit(1757083726.074:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 887.854991][ T30] audit: type=1326 audit(1757083726.084:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 887.899802][ T30] audit: type=1326 audit(1757083726.084:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 887.995794][ T30] audit: type=1326 audit(1757083726.084:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 888.634670][ T30] audit: type=1326 audit(1757083726.084:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 888.801800][ T30] audit: type=1326 audit(1757083726.084:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 889.140699][ T5986] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 889.193931][T12278] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1312'. [ 889.203438][T12278] openvswitch: netlink: Message has 512 unknown bytes. [ 889.251749][ T30] audit: type=1326 audit(1757083726.084:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 889.498825][ T30] audit: type=1326 audit(1757083726.084:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 889.620237][ T5986] usb 8-1: config 0 has no interfaces? [ 889.647064][ T5986] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 889.659013][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.667280][ T5986] usb 8-1: Product: syz [ 889.671547][ T5986] usb 8-1: Manufacturer: syz [ 889.676319][ T5986] usb 8-1: SerialNumber: syz [ 889.681051][ T30] audit: type=1326 audit(1757083726.084:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.3.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 889.765435][ T5986] usb 8-1: config 0 descriptor?? [ 889.771771][T12282] nvme_fabrics: missing parameter 'transport=%s' [ 889.807719][T12282] nvme_fabrics: missing parameter 'nqn=%s' [ 890.337071][T12287] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1314'. [ 890.523828][T12289] loop5: detected capacity change from 0 to 736 [ 890.671773][ T1220] usb 5-1: USB disconnect, device number 17 [ 890.692819][ T1220] usblp0: removed [ 891.296303][ T5987] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 891.628079][ T5987] usb 6-1: Using ep0 maxpacket: 8 [ 891.671423][ T5987] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 891.686065][ T5987] usb 6-1: config 0 has no interface number 0 [ 891.735178][ T5987] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.993012][ T5987] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 892.011061][ T5987] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 892.335299][ T5987] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 892.534812][ T5987] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 892.547175][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.626839][ T5987] usb 6-1: config 0 descriptor?? [ 892.652458][ T5987] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 892.874561][ T24] usb 6-1: USB disconnect, device number 15 [ 892.971440][ T5987] usb 8-1: USB disconnect, device number 11 [ 892.977701][ T1220] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 893.017217][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 893.148779][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.162837][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.173568][ T1220] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 893.188987][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.215016][ T1220] usb 4-1: config 0 descriptor?? [ 893.778618][ T1220] usbhid 4-1:0.0: can't add hid device: -71 [ 893.784782][ T1220] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 894.706788][ T1220] usb 4-1: USB disconnect, device number 11 [ 894.985945][T12329] loop3: detected capacity change from 0 to 736 [ 896.652847][T12337] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1327'. [ 903.094151][ T5873] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 903.200971][T12393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 903.356272][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 903.386573][ T5873] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 903.416827][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.446346][ T5873] usb 3-1: Product: syz [ 903.450567][ T5873] usb 3-1: Manufacturer: syz [ 903.455182][ T5873] usb 3-1: SerialNumber: syz [ 903.505089][ T5873] usb 3-1: config 0 descriptor?? [ 903.542119][ T5873] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 903.616443][ T5987] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 903.978703][ T5987] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 904.113143][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 904.113175][ T30] audit: type=1326 audit(1757083743.234:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.2.1342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34af8ebe9 code=0x0 [ 904.164951][ T5873] gspca_ov534_9: reg_w failed -71 [ 904.199442][ T5951] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 904.224061][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.246526][ T5987] usb 5-1: config 0 descriptor?? [ 904.738324][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 904.747581][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 904.768077][ T5951] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 904.936303][ T5873] gspca_ov534_9: Unknown sensor 0000 [ 904.936411][ T5873] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 905.086051][ T5873] usb 3-1: USB disconnect, device number 15 [ 905.086908][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.123801][ T5951] usb 4-1: Product: syz [ 905.135738][ T5951] usb 4-1: Manufacturer: syz [ 905.153466][ T5951] usb 4-1: SerialNumber: syz [ 905.177684][ T5951] usb 4-1: config 0 descriptor?? [ 905.215135][ T5951] usb 4-1: no audio or video endpoints found [ 905.533304][ T5951] usb 4-1: USB disconnect, device number 12 [ 905.911031][ T5987] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 906.044424][ T5987] usb 5-1: USB disconnect, device number 18 [ 911.065607][T12458] kvm: pic: non byte write [ 911.775537][T12468] loop3: detected capacity change from 0 to 2048 [ 911.906697][T12468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.527207][T12473] fuse: Unknown parameter 'grou00000000000000000000' [ 912.951274][T12486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1370'. [ 913.216299][ T5873] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 913.713297][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.744695][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.830044][ T5873] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 913.949841][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.989276][ T5873] usb 5-1: config 0 descriptor?? [ 914.412708][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 914.434113][T12495] loop2: detected capacity change from 0 to 2048 [ 914.639385][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 914.718089][ T5873] usb 5-1: USB disconnect, device number 19 [ 915.911549][T12512] loop2: detected capacity change from 0 to 2048 [ 916.532058][T12512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.943784][T12518] kvm: pic: non byte write [ 917.836277][ T5873] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 918.001202][ T5873] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.019187][ T5873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.045011][ T5873] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.065502][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.116951][ T5873] usb 6-1: Product: syz [ 918.155908][ T5873] usb 6-1: Manufacturer: syz [ 918.172954][ T5873] usb 6-1: SerialNumber: syz [ 918.698377][ T5873] usb 6-1: 0:2 : does not exist [ 918.792098][T12538] 9pnet_fd: Insufficient options for proto=fd [ 920.762334][ T5951] usb 6-1: USB disconnect, device number 16 [ 921.418286][T12559] loop5: detected capacity change from 0 to 2048 [ 921.557271][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 921.966804][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 922.016381][T12559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.108022][ T5931] usb 5-1: device descriptor read/64, error -32 [ 922.560085][ T5931] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 923.343633][T12572] kvm: pic: non byte write [ 923.382768][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 923.398694][ T5931] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 923.408700][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.429423][ T5931] usb 5-1: Product: syz [ 923.532857][ T5931] usb 5-1: Manufacturer: syz [ 923.578299][ T5931] usb 5-1: SerialNumber: syz [ 923.668808][ T5931] usb 5-1: config 0 descriptor?? [ 923.721365][ T5931] gspca_main: se401-2.14.0 probing 047d:5003 [ 924.134257][T12587] 9pnet_fd: Insufficient options for proto=fd [ 925.203929][ T5931] gspca_se401: read req failed req 0x06 error -19 [ 925.267822][ T5931] usb 5-1: USB disconnect, device number 21 [ 925.622825][T12604] loop2: detected capacity change from 0 to 2048 [ 926.207177][T12604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 926.819452][T12618] tipc: Started in network mode [ 926.825182][T12618] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 926.841545][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 928.347160][T12626] fuse: Bad value for 'fd' [ 928.658910][T12632] loop4: detected capacity change from 0 to 736 [ 928.691720][T12630] loop3: detected capacity change from 0 to 1024 [ 930.002165][T12645] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1414'. [ 930.014000][T12645] openvswitch: netlink: Message has 512 unknown bytes. [ 930.538816][T12651] loop2: detected capacity change from 0 to 2048 [ 930.652228][T12651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 931.800037][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.806613][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.237170][T12664] fuse: Bad value for 'fd' [ 933.506214][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 933.531285][T12673] loop7: detected capacity change from 0 to 1024 [ 933.768656][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.986219][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.996088][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 934.036221][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.066151][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.100961][ T24] usb 6-1: config 0 descriptor?? [ 935.441633][ T24] hid_parser_main: 4 callbacks suppressed [ 935.441651][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.488240][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.519741][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.547951][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.555363][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.606331][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.639151][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.665363][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.686353][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.706199][ T24] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 935.817026][ T24] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 935.871581][ T24] usb 6-1: USB disconnect, device number 17 [ 936.183471][T12689] fido_id[12689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 937.174510][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 937.574632][T12716] loop7: detected capacity change from 0 to 2048 [ 937.622054][T12716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.663483][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.189224][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.245511][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 938.283943][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.315494][ T24] usb 5-1: config 0 descriptor?? [ 938.959402][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 939.076320][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 939.397418][ T24] usb 5-1: USB disconnect, device number 22 [ 940.417584][T12726] loop5: detected capacity change from 0 to 1024 [ 941.202061][T12730] kvm: pic: non byte write [ 942.324246][T12747] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1440'. [ 944.729703][T12763] loop4: detected capacity change from 0 to 128 [ 944.908842][T12765] loop7: detected capacity change from 0 to 2048 [ 945.496455][T12765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.515594][T12763] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 945.780571][T12763] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 945.795863][ T8479] udevd[8479]: incorrect jbd checksum on /dev/loop4 [ 946.724189][T12770] loop4: detected capacity change from 0 to 1024 [ 946.753742][ T30] audit: type=1326 audit(1757083785.444:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 947.080167][ T30] audit: type=1326 audit(1757083785.444:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 947.141031][ T30] audit: type=1326 audit(1757083785.444:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 947.378360][ T30] audit: type=1326 audit(1757083785.444:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 947.561819][ T30] audit: type=1326 audit(1757083785.444:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 948.012660][ T30] audit: type=1326 audit(1757083785.444:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 948.304172][T12777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 948.355813][ T30] audit: type=1326 audit(1757083785.444:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 948.526079][ T30] audit: type=1326 audit(1757083785.444:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 949.001452][T12793] loop5: detected capacity change from 0 to 512 [ 949.510237][ T5951] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 949.566211][ T30] audit: type=1326 audit(1757083785.454:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 949.590225][T12793] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 949.601023][T12793] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 949.621259][ T30] audit: type=1326 audit(1757083785.454:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f6af858ebe9 code=0x7ffc0000 [ 949.820239][T12791] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 952.053307][T12804] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1453'. [ 953.643364][T12808] overlayfs: overlapping lowerdir path [ 953.671372][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 954.394014][T12819] loop4: detected capacity change from 0 to 2048 [ 954.959524][T12819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 955.727903][ T5931] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 957.753147][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.846928][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.046363][ T5931] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 958.066157][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.154333][ T5931] usb 4-1: config 0 descriptor?? [ 958.623600][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 958.636450][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 959.051067][ T5931] usb 4-1: USB disconnect, device number 13 [ 961.063199][T12871] loop2: detected capacity change from 0 to 2048 [ 961.721934][T12871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 963.255649][T12885] tipc: Started in network mode [ 963.260659][T12885] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 963.269740][T12885] tipc: Enabling of bearer rejected, failed to enable media [ 964.079333][T12896] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1471'. [ 964.090196][T12896] openvswitch: netlink: Message has 512 unknown bytes. [ 965.542847][T12898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.549783][ T5931] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 965.740683][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.752259][ T5931] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.792309][ T5931] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 965.816289][ T5951] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 965.834059][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.086947][ T5931] usb 8-1: config 0 descriptor?? [ 966.192367][T12910] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 967.076364][ T5987] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 967.178481][ T5931] usbhid 8-1:0.0: can't add hid device: -71 [ 967.184500][ T5931] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 967.237303][ T5931] usb 8-1: USB disconnect, device number 12 [ 967.397548][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 967.435575][ T5987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 967.513474][ T5987] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.577733][ T5987] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 967.826431][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.834485][ T5987] usb 5-1: Product: syz [ 967.913972][ T5987] usb 5-1: Manufacturer: syz [ 967.941864][ T5987] usb 5-1: SerialNumber: syz [ 969.259105][ T5987] hub 5-1:1.0: bad descriptor, ignoring hub [ 969.265111][ T5987] hub 5-1:1.0: probe with driver hub failed with error -5 [ 969.290572][ T5951] usb 6-1: device descriptor read/all, error -71 [ 970.351596][T12924] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 970.722642][ T5987] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 970.738462][T12924] usb 8-1: config 0 has no interfaces? [ 970.787224][ T5987] usb 5-1: USB disconnect, device number 23 [ 970.838007][ T5987] usblp0: removed [ 971.616284][T12924] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 971.625485][T12924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.860910][T12924] usb 8-1: Product: syz [ 972.004092][T12924] usb 8-1: Manufacturer: syz [ 972.044435][T12924] usb 8-1: SerialNumber: syz [ 972.121233][T12924] usb 8-1: config 0 descriptor?? [ 972.562851][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 972.562869][ T30] audit: type=1326 audit(1757083811.674:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.5.1490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7298ebe9 code=0x0 [ 972.672257][T12967] nvme_fabrics: missing parameter 'transport=%s' [ 972.684765][T12967] nvme_fabrics: missing parameter 'nqn=%s' [ 975.081887][ T5873] usb 8-1: USB disconnect, device number 13 [ 976.516361][T12924] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 976.728471][T12924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.919112][T12924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.004913][T12924] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 977.428009][T12924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.541209][T12924] usb 8-1: config 0 descriptor?? [ 978.594059][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 978.601410][T12924] usbhid 8-1:0.0: can't add hid device: -32 [ 978.608473][T12924] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 978.678158][T12924] usb 8-1: USB disconnect, device number 14 [ 979.336293][ T5951] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 979.468322][T13028] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1504'. [ 979.646396][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 979.665666][ T5951] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 979.674342][ T5951] usb 5-1: config 0 has no interface number 0 [ 979.685451][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 979.726720][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 979.741954][ T5951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 979.761339][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 979.979280][ T5951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 980.000952][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.072432][ T5951] usb 5-1: config 0 descriptor?? [ 980.284297][ T5951] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 980.601666][ T5982] usb 5-1: USB disconnect, device number 24 [ 980.611072][ T5982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 980.686550][T13037] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1507'. [ 982.237950][T13048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.415434][T13043] overlayfs: overlapping lowerdir path [ 982.446574][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 983.236318][ T5873] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 983.610728][ T5873] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 983.634200][ T5873] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 983.769798][ T5873] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.785688][ T5873] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 985.867548][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.919789][ T5873] usb 8-1: can't set config #1, error -71 [ 985.960047][ T5873] usb 8-1: USB disconnect, device number 15 [ 987.676047][T13105] loop5: detected capacity change from 0 to 512 [ 988.226211][T13105] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 988.237016][T13105] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 988.289568][T13103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 990.176270][ T5982] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 990.326212][ T5982] usb 4-1: Using ep0 maxpacket: 8 [ 990.348648][ T5982] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 990.368055][ T5982] usb 4-1: config 0 has no interface number 0 [ 990.398169][ T5982] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.462557][ T5982] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 990.516009][ T5982] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.561564][ T5982] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 990.581652][T13121] loop7: detected capacity change from 0 to 2048 [ 990.615541][ T5982] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 990.636219][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.659937][ T5982] usb 4-1: config 0 descriptor?? [ 990.733912][ T5982] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 991.008820][ T5982] usb 4-1: USB disconnect, device number 14 [ 991.525325][ T5982] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 991.943660][T13139] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1529'. [ 992.107344][T13140] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1530'. [ 992.527144][T13148] tipc: Enabling of bearer rejected, failed to enable media [ 993.296182][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.304057][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.360802][T12924] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 993.786216][T12924] usb 4-1: Using ep0 maxpacket: 8 [ 993.814601][T12924] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 993.877016][T12924] usb 4-1: config 0 has no interface number 0 [ 993.930297][T12924] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.303004][T12924] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 994.353021][T12924] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 994.364146][T12924] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 994.517506][T12924] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 994.536287][T12924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.557658][T12924] usb 4-1: config 0 descriptor?? [ 994.795085][T12924] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 995.123785][T12924] usb 4-1: USB disconnect, device number 15 [ 995.178241][T12924] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 998.597516][T13188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1542'. [ 999.052654][T12924] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1000.065698][T12924] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1000.187309][T12924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.252063][T12924] usb 4-1: config 0 descriptor?? [ 1001.026181][ T30] audit: type=1326 audit(1757083839.994:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.7.1547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b01f8ebe9 code=0x0 [ 1001.195511][T13216] nvme_fabrics: missing parameter 'transport=%s' [ 1001.202587][T13216] nvme_fabrics: missing parameter 'nqn=%s' [ 1001.261473][T12924] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 1001.560337][T12924] usb 4-1: USB disconnect, device number 16 [ 1003.607393][T13245] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1556'. [ 1006.214506][T13263] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1558'. [ 1006.225783][T13263] openvswitch: netlink: Message has 512 unknown bytes. [ 1007.840197][T13276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.078232][T13282] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1565'. [ 1008.087810][T13282] openvswitch: netlink: Message has 512 unknown bytes. [ 1009.174720][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1009.570746][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1009.750643][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1010.127844][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.931742][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1010.971021][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1011.018971][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.061042][ T24] usb 4-1: can't set config #1, error -71 [ 1011.360607][ T24] usb 4-1: USB disconnect, device number 17 [ 1013.151904][T13318] tipc: Started in network mode [ 1013.158079][T13318] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 1013.168518][T13318] tipc: Enabling of bearer rejected, failed to enable media [ 1016.256170][ T5873] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1016.438235][ T5873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.574758][ T5873] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1016.679713][T13353] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1581'. [ 1016.834473][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.846142][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.897014][ T5873] usb 6-1: Product: syz [ 1016.966385][ T5873] usb 6-1: Manufacturer: syz [ 1016.971096][ T5873] usb 6-1: SerialNumber: syz [ 1017.319671][T13344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1018.586505][T13344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1018.604251][T13365] tipc: Enabling of bearer rejected, failed to enable media [ 1018.666212][ T5982] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1018.943803][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.115259][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.138807][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1019.146538][ T5873] cdc_mbim 6-1:1.0: failed to get mac address [ 1019.153082][ T5873] cdc_mbim 6-1:1.0: bind() failure [ 1019.166274][ T5873] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1019.190178][ T5873] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1019.336294][ T5982] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1019.358559][ T5982] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1019.386153][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.389737][ T5873] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1019.509198][ T5982] usb 4-1: config 0 descriptor?? [ 1019.726053][ T5873] usb 6-1: USB disconnect, device number 20 [ 1020.137666][ T5982] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1020.145340][ T5982] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1020.152897][ T5982] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1020.167658][ T5982] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1020.185299][ T5982] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 1020.221497][ T5982] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1020.332253][ T5982] usb 4-1: USB disconnect, device number 18 [ 1020.444098][T13373] fido_id[13373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1020.495912][T13378] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1587'. [ 1020.506158][T13378] openvswitch: netlink: Message has 512 unknown bytes. [ 1025.001885][ T30] audit: type=1326 audit(1757083864.114:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13431 comm="syz.2.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34af8ebe9 code=0x0 [ 1025.107903][T13440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1604'. [ 1025.528529][T13443] nvme_fabrics: missing parameter 'transport=%s' [ 1025.535217][T13443] nvme_fabrics: missing parameter 'nqn=%s' [ 1027.247120][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1027.278934][T13455] loop5: detected capacity change from 0 to 1024 [ 1027.488120][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.204606][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.426941][ T5873] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1028.466209][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.556607][ T5873] usb 5-1: config 0 descriptor?? [ 1028.681233][T13466] kvm: pic: non byte write [ 1028.983246][ T5873] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1029.205219][ T5873] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 1029.245954][ T5873] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 1029.457277][ T5873] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -32 [ 1029.493492][ T5873] usb 5-1: USB disconnect, device number 25 [ 1031.528662][T13494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.796255][ T5951] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1032.050562][ T5951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1032.090706][ T5951] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1032.194837][ T5951] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.316566][ T5951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1032.335897][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.356284][ T5951] usb 4-1: Product: syz [ 1032.361782][ T5951] usb 4-1: Manufacturer: syz [ 1032.386229][ T5951] usb 4-1: SerialNumber: syz [ 1032.493469][ T5951] hub 4-1:1.0: bad descriptor, ignoring hub [ 1032.561415][ T5951] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1032.644088][T13505] loop5: detected capacity change from 0 to 1024 [ 1032.708938][ T5951] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1032.756564][ T5982] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1032.999146][ T5951] usb 4-1: USB disconnect, device number 19 [ 1033.106596][ T5951] usblp0: removed [ 1033.190428][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.620004][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.654319][ T5982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.793021][ T5982] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.843914][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.859802][ T5982] usb 3-1: config 0 descriptor?? [ 1034.445938][ T5982] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1034.480613][ T5982] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1034.520786][ T5982] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1034.583550][ T5982] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1034.653559][ T5982] usb 3-1: USB disconnect, device number 17 [ 1034.911848][T13522] fido_id[13522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1038.406939][T13558] loop3: detected capacity change from 0 to 1024 [ 1040.534571][T13575] kvm: pic: non byte write [ 1041.091975][T13580] loop2: detected capacity change from 0 to 1024 [ 1042.636184][ T5987] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1042.939483][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.964937][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.994129][ T5987] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1043.017294][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.048617][ T5987] usb 8-1: config 0 descriptor?? [ 1043.196186][ T30] audit: type=1326 audit(1757083882.244:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13592 comm="syz.2.1641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa34af8ebe9 code=0x0 [ 1043.489722][ T5987] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 1043.565103][T13596] nvme_fabrics: missing parameter 'transport=%s' [ 1043.580121][T13596] nvme_fabrics: missing parameter 'nqn=%s' [ 1043.763681][ T5987] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 1043.792456][ T5987] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 1043.868885][ T5987] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -32 [ 1043.928613][ T5987] usb 8-1: USB disconnect, device number 16 [ 1048.146231][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 1051.114584][T13677] fuse: Unknown parameter '0x0000000000000003' [ 1051.272004][T13668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.856555][ T1220] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1052.870489][ T1220] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1052.883652][ T1220] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1052.906246][ T1220] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.005093][ T1220] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1053.031462][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.122253][ T1220] usb 6-1: Product: syz [ 1053.145290][ T1220] usb 6-1: Manufacturer: syz [ 1053.176793][ T1220] usb 6-1: SerialNumber: syz [ 1053.296183][ T5982] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1053.995111][ T1220] usb 6-1: can't set config #1, error -71 [ 1054.020036][ T5982] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.034152][ T1220] usb 6-1: USB disconnect, device number 21 [ 1054.045422][ T5982] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1054.054608][ T5982] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1054.068612][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.692977][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.699384][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.126259][ T5982] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1055.400315][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 1055.410634][ T5982] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1055.419878][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.428049][ T5982] usb 3-1: Product: syz [ 1055.433651][ T5982] usb 3-1: Manufacturer: syz [ 1055.438411][ T5982] usb 3-1: SerialNumber: syz [ 1055.451526][ T5982] usb 3-1: config 0 descriptor?? [ 1055.463935][ T5982] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1055.980580][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 1056.056896][ T1220] usb 8-1: USB disconnect, device number 17 [ 1056.438447][ T5982] gspca_ov534_9: reg_w failed -71 [ 1056.450035][ T30] audit: type=1326 audit(1757083895.554:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13721 comm="syz.2.1676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa34af8ebe9 code=0x0 [ 1056.756920][ T5982] gspca_ov534_9: Unknown sensor 0000 [ 1056.757034][ T5982] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1056.820130][ T5982] usb 3-1: USB disconnect, device number 18 [ 1058.799355][T13766] tipc: Enabling of bearer rejected, failed to enable media [ 1060.515719][T13772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.866307][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1061.171512][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1061.220942][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1061.295044][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.334225][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1061.409362][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.468319][ T24] usb 4-1: Product: syz [ 1061.527759][ T24] usb 4-1: Manufacturer: syz [ 1061.562341][ T24] usb 4-1: SerialNumber: syz [ 1061.615708][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 1062.035154][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1062.299941][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1062.610640][ T24] usb 4-1: USB disconnect, device number 20 [ 1062.635130][ T30] audit: type=1326 audit(1757083901.754:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13799 comm="syz.5.1694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7298ebe9 code=0x0 [ 1062.657851][ T24] usblp0: removed [ 1063.273964][T13803] nvme_fabrics: missing parameter 'transport=%s' [ 1063.322821][T13803] nvme_fabrics: missing parameter 'nqn=%s' [ 1064.128124][T13819] kvm: pic: non byte write [ 1064.863303][ T5982] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1065.036304][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 1065.049063][ T5982] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1065.058104][ T5982] usb 5-1: config 0 has no interface number 0 [ 1065.064357][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.087622][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1065.101939][ T5982] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.118809][ T5982] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1065.439494][ T5982] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1065.500924][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.624504][T13834] 9pnet_fd: Insufficient options for proto=fd [ 1065.677805][ T5982] usb 5-1: config 0 descriptor?? [ 1065.714945][ T5982] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1065.938374][ T5982] usb 5-1: USB disconnect, device number 26 [ 1065.958478][ T5982] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1068.087801][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 1070.263570][T13877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.593517][ T5982] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1070.766453][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1070.801163][ T5982] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1070.870213][ T5982] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1071.235083][ T5982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1071.263384][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.282370][ T5982] usb 5-1: Product: syz [ 1071.409832][ T5982] usb 5-1: Manufacturer: syz [ 1071.414493][ T5982] usb 5-1: SerialNumber: syz [ 1071.861765][ T5982] hub 5-1:1.0: bad descriptor, ignoring hub [ 1071.884407][ T5982] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1072.191258][ T5982] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1073.721570][T13906] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1073.940152][ T5873] usb 5-1: USB disconnect, device number 27 [ 1074.077597][T12924] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1074.992012][ T5873] usblp0: removed [ 1075.028928][T12924] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.048855][T12924] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1075.084530][T12924] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1075.200109][T12924] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1075.209360][T12924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.244458][T12924] usb 8-1: Product: syz [ 1075.300015][T12924] usb 8-1: Manufacturer: syz [ 1075.304963][T12924] usb 8-1: SerialNumber: syz [ 1075.342283][T12924] hub 8-1:1.0: bad descriptor, ignoring hub [ 1075.352928][T12924] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1075.554861][T12924] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1075.774212][T12924] usb 8-1: USB disconnect, device number 18 [ 1076.213057][T12924] usblp0: removed [ 1076.467982][T13927] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1724'. [ 1076.880454][T13929] kvm: pic: non byte write [ 1079.238763][T13957] kvm: pic: non byte write [ 1079.415038][T13961] loop5: detected capacity change from 0 to 512 [ 1079.538889][T13961] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1079.549739][T13961] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1080.001042][T13958] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1083.990505][T14008] loop3: detected capacity change from 0 to 512 [ 1084.037795][T14008] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1084.048621][T14008] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1084.557355][T14006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1087.287007][ T5873] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1087.618623][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.629671][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.748602][ T5873] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1087.766153][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.817044][ T5873] usb 6-1: config 0 descriptor?? [ 1088.849553][ T5873] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1089.010298][ T5873] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 1089.018006][ T5873] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 1089.098671][ T5873] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -5 [ 1089.136192][T12924] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1089.214684][ T5982] usb 6-1: USB disconnect, device number 22 [ 1089.326991][T12924] usb 4-1: Using ep0 maxpacket: 8 [ 1089.337738][T12924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.356099][T12924] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.381957][T12924] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1089.391728][T12924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.404825][T12924] usb 4-1: config 0 descriptor?? [ 1089.485079][T14052] kvm: pic: non byte write [ 1089.625739][ T5873] usb 4-1: USB disconnect, device number 21 [ 1094.769990][T14097] fuse: Bad value for 'fd' [ 1095.434464][T14109] tipc: Enabling of bearer rejected, failed to enable media [ 1097.486737][T12924] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1097.857065][T12924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.886217][T12924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.003381][T12924] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1098.081209][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.164054][T12924] usb 6-1: config 0 descriptor?? [ 1098.633341][T12924] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1098.831623][T12924] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 1098.860825][T12924] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 1099.221743][T12924] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -5 [ 1099.248686][T12924] usb 6-1: USB disconnect, device number 23 [ 1099.901749][T14143] tipc: Enabled bearer , priority 0 [ 1100.045666][T14143] tipc: Resetting bearer [ 1100.189657][T14142] tipc: Disabling bearer [ 1102.731707][T14170] overlayfs: missing 'lowerdir' [ 1102.769787][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1104.566268][T12924] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1105.285661][T12924] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1105.330590][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.504657][T12924] usb 6-1: config 0 descriptor?? [ 1106.406794][T12924] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 1106.770312][T12924] usb 6-1: USB disconnect, device number 24 [ 1107.433516][T14199] loop3: detected capacity change from 0 to 512 [ 1108.057173][T14199] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1108.067925][T14199] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1108.132174][T14198] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1108.725795][T14209] loop5: detected capacity change from 0 to 512 [ 1108.735082][T14209] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1108.745867][T14209] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1108.777572][T14209] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1109.969535][T14219] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1792'. [ 1109.980808][T14219] openvswitch: netlink: Message has 512 unknown bytes. [ 1110.950397][T14229] loop7: detected capacity change from 0 to 512 [ 1111.596120][T14229] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1111.606827][T14229] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1111.661809][T14228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1113.192246][T14240] 9pnet_fd: Insufficient options for proto=fd [ 1113.844027][T14246] loop3: detected capacity change from 0 to 128 [ 1113.873838][ T8109] udevd[8109]: incorrect jbd checksum on /dev/loop3 [ 1113.893944][T14246] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1113.966237][T14246] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1114.071389][ T8109] udevd[8109]: incorrect jbd checksum on /dev/loop3 [ 1114.562973][T14251] loop3: detected capacity change from 0 to 1024 [ 1115.147766][T14249] tipc: Started in network mode [ 1115.152675][T14249] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 1115.161990][ T30] audit: type=1326 audit(1757083953.584:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1115.259177][T14249] tipc: Enabling of bearer rejected, failed to enable media [ 1115.565185][ T30] audit: type=1326 audit(1757083953.584:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1115.675966][ T30] audit: type=1326 audit(1757083953.584:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1115.834388][ T30] audit: type=1326 audit(1757083953.584:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1116.223746][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.230211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.363097][ T30] audit: type=1326 audit(1757083953.584:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1116.743737][ T30] audit: type=1326 audit(1757083953.584:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1116.900374][T14261] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1802'. [ 1116.909888][T14261] openvswitch: netlink: Message has 512 unknown bytes. [ 1116.929749][T14261] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 1116.941780][T14261] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1116.950394][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.3.1802 Not tainted syzkaller #0 PREEMPT(full) [ 1116.959869][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1116.969944][T14261] RIP: 0010:io_check_coalesce_buffer+0x354/0xb60 [ 1116.976312][T14261] Code: f7 e8 30 5f 63 fd 4c 89 74 24 28 48 8b 44 24 18 4c 8b 74 d8 08 49 8d 6e 08 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 fe 5e 63 fd 48 8b 6d 00 48 89 ee 48 [ 1116.995943][T14261] RSP: 0018:ffffc900145ffa38 EFLAGS: 00010202 [ 1117.002052][T14261] RAX: 0000000000000001 RBX: 00000000000001ff RCX: dffffc0000000000 [ 1117.010054][T14261] RDX: ffffc90010009000 RSI: 0000000000007432 RDI: 0000000000007433 [ 1117.018039][T14261] RBP: 0000000000000008 R08: ffffea00011e0007 R09: 1ffffd400023c000 [ 1117.026002][T14261] R10: dffffc0000000000 R11: fffff9400023c001 R12: ffff8880575d8ff8 [ 1117.033974][T14261] R13: 0000000000000200 R14: 0000000000000000 R15: ffffea00011e0000 [ 1117.041935][T14261] FS: 00007f21b6ff46c0(0000) GS:ffff888125af9000(0000) knlGS:0000000000000000 [ 1117.050854][T14261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.057440][T14261] CR2: 0000001b33716ff8 CR3: 0000000054252000 CR4: 00000000003526f0 [ 1117.065406][T14261] Call Trace: [ 1117.068674][T14261] [ 1117.071600][T14261] io_sqe_buffer_register+0x1ef/0x20a0 [ 1117.077063][T14261] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1117.082957][T14261] ? trace_kmalloc+0x1f/0xd0 [ 1117.087539][T14261] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1117.093093][T14261] ? io_sqe_buffers_register+0x138/0x8e0 [ 1117.098738][T14261] ? iovec_from_user+0x1ba/0x250 [ 1117.103670][T14261] io_sqe_buffers_register+0x3b9/0x8e0 [ 1117.109127][T14261] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1117.115098][T14261] ? __fget_files+0x3a0/0x420 [ 1117.119790][T14261] ? __fget_files+0x2a/0x420 [ 1117.124392][T14261] ? io_is_uring_fops+0xd/0x50 [ 1117.129163][T14261] __se_sys_io_uring_register+0xb85/0x11b0 [ 1117.134974][T14261] ? __se_sys_futex+0x36f/0x400 [ 1117.139840][T14261] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1117.146083][T14261] ? rcu_is_watching+0x15/0xb0 [ 1117.150849][T14261] ? do_syscall_64+0xbe/0xfa0 [ 1117.155528][T14261] do_syscall_64+0xfa/0xfa0 [ 1117.160022][T14261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.166104][T14261] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1117.171759][T14261] ? clear_bhb_loop+0x60/0xb0 [ 1117.176429][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.182324][T14261] RIP: 0033:0x7f21b918ebe9 [ 1117.186732][T14261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.206329][T14261] RSP: 002b:00007f21b6ff4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1117.214735][T14261] RAX: ffffffffffffffda RBX: 00007f21b93c6270 RCX: 00007f21b918ebe9 [ 1117.222707][T14261] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 1117.230682][T14261] RBP: 00007f21b9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1117.238645][T14261] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 1117.246604][T14261] R13: 00007f21b93c6308 R14: 00007f21b93c6270 R15: 00007ffe3be53a48 [ 1117.254575][T14261] [ 1117.257584][T14261] Modules linked in: [ 1117.261604][T14261] ---[ end trace 0000000000000000 ]--- [ 1117.486211][ T30] audit: type=1326 audit(1757083953.584:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1117.516207][ T30] audit: type=1326 audit(1757083953.584:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1117.538661][ T30] audit: type=1326 audit(1757083953.594:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1117.561552][ T30] audit: type=1326 audit(1757083953.594:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14244 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f21b918ebe9 code=0x7ffc0000 [ 1117.845000][T14261] RIP: 0010:io_check_coalesce_buffer+0x354/0xb60 [ 1117.851826][T14261] Code: f7 e8 30 5f 63 fd 4c 89 74 24 28 48 8b 44 24 18 4c 8b 74 d8 08 49 8d 6e 08 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 fe 5e 63 fd 48 8b 6d 00 48 89 ee 48 [ 1117.886161][T14261] RSP: 0018:ffffc900145ffa38 EFLAGS: 00010202 [ 1117.989250][T14261] RAX: 0000000000000001 RBX: 00000000000001ff RCX: dffffc0000000000 [ 1118.125977][T14261] RDX: ffffc90010009000 RSI: 0000000000007432 RDI: 0000000000007433 [ 1118.134175][T14261] RBP: 0000000000000008 R08: ffffea00011e0007 R09: 1ffffd400023c000 [ 1118.142503][T14261] R10: dffffc0000000000 R11: fffff9400023c001 R12: ffff8880575d8ff8 [ 1118.150589][T14261] R13: 0000000000000200 R14: 0000000000000000 R15: ffffea00011e0000 [ 1118.158647][T14261] FS: 00007f21b6ff46c0(0000) GS:ffff8881259f9000(0000) knlGS:0000000000000000 [ 1118.167678][T14261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.174292][T14261] CR2: 00002000003d1030 CR3: 0000000054252000 CR4: 00000000003526f0 [ 1118.182397][T14261] Kernel panic - not syncing: Fatal exception [ 1118.188774][T14261] Kernel Offset: disabled [ 1118.193120][T14261] Rebooting in 86400 seconds..