last executing test programs: 4m38.519479487s ago: executing program 1 (id=165): socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800900010068617368000000002400028008000240000000000800014000000004080004400000000008000340000000370900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 4m36.113928966s ago: executing program 1 (id=174): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x3052c0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000180), 0xee, 0x456, &(0x7f00000004c0)="$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") r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m32.072342425s ago: executing program 1 (id=189): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3587], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x1, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5c928c36, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xb) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xe02, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}) socket$nl_generic(0x10, 0x3, 0x10) 4m28.196466655s ago: executing program 1 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 4m26.497032282s ago: executing program 1 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3587], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x1, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5c928c36, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xb) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x213, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xe02, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}) socket$nl_generic(0x10, 0x3, 0x10) 4m24.561744217s ago: executing program 1 (id=216): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 4m24.326699074s ago: executing program 32 (id=216): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 3m40.291525665s ago: executing program 5 (id=464): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3m39.997337619s ago: executing program 5 (id=469): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001100), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) preadv(r0, 0x0, 0x0, 0x80, 0x6) 3m39.659510958s ago: executing program 5 (id=473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0xc, 0x6, 0x5}, {0xc, 0x117, 0x7ff}], 0x18}}], 0x1, 0x40814) 3m39.358404843s ago: executing program 5 (id=477): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000200)='.\x00', 0x170) 3m38.631590607s ago: executing program 5 (id=479): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3m38.095361429s ago: executing program 5 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delqdisc={0xb0, 0x25, 0x220, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfffb}, {0x6, 0x7}, {0x10, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0xc0, 0x0, 0x189, 0x0, 0x6, 0x64}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x0, 0x5, 0x44, 0x2, 0x81, 0xfff}}, {0x4}}, {{0x1c, 0x1, {0x31, 0xb0, 0x1000, 0x7, 0x1, 0x2c0, 0xffff}}, {0x4}}, {{0x1c, 0x1, {0x55, 0xa, 0x1e, 0x0, 0x2, 0xecba, 0x7ff}}, {0x4}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket$inet6(0xa, 0x3, 0xd) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) close(r3) shutdown(r0, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x401, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a7a00000000000000069078ac141400ac1e0001890b6be0000001ac1414aa44080703000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x3ef) r5 = socket(0x800000018, 0x0, 0x0) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000171) r6 = socket(0x10, 0x800, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000200)=""/136, 0x88) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010003b15000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500170000000000050016"], 0x44}}, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x3, [@restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @datasec={0xe, 0x1, 0x0, 0xf, 0x3, [{0x5, 0xa5, 0x6}], "bb6edb"}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x8, 0x8}, {0x0, 0x1}, {0xd, 0x601}, {0xf655, 0x7}, {0xd}, {0xf, 0x8}, {0x4, 0x4}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x400, [{0x3, 0x0, 0x80}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/169, 0xdb, 0xa9, 0x0, 0xa, 0x0, @void, @value}, 0x28) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="606e0000f7b452a176b1777a866cecf17a9f88a61c8bf244cbf572de0facdcb13348cf997cd82a702e90550a755b23ecfa00e7ac98b9149fae7cade26640f98ee7b58b3779a6c901fce88ac1081d5695a8cda1200082f2ca1e6bff420ffdb1a74dba35d632100ebbfc6d2ced5c46ba73e1823cbdb70b41af37f8bf9a893ff8ef002eeca459f414cac4c9000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000030000004c000180380004001400010002000000ac1414aa0000000000000000200002000a004e2300000749fc020000000000000000000000000001030000000d0001007564703a73797a3200000000"], 0x60}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) 3m37.857531517s ago: executing program 33 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delqdisc={0xb0, 0x25, 0x220, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfffb}, {0x6, 0x7}, {0x10, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0xc0, 0x0, 0x189, 0x0, 0x6, 0x64}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x0, 0x5, 0x44, 0x2, 0x81, 0xfff}}, {0x4}}, {{0x1c, 0x1, {0x31, 0xb0, 0x1000, 0x7, 0x1, 0x2c0, 0xffff}}, {0x4}}, {{0x1c, 0x1, {0x55, 0xa, 0x1e, 0x0, 0x2, 0xecba, 0x7ff}}, {0x4}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket$inet6(0xa, 0x3, 0xd) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) close(r3) shutdown(r0, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x401, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a7a00000000000000069078ac141400ac1e0001890b6be0000001ac1414aa44080703000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x3ef) r5 = socket(0x800000018, 0x0, 0x0) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000171) r6 = socket(0x10, 0x800, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000200)=""/136, 0x88) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010003b15000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500170000000000050016"], 0x44}}, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x3, [@restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @datasec={0xe, 0x1, 0x0, 0xf, 0x3, [{0x5, 0xa5, 0x6}], "bb6edb"}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x8, 0x8}, {0x0, 0x1}, {0xd, 0x601}, {0xf655, 0x7}, {0xd}, {0xf, 0x8}, {0x4, 0x4}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x400, [{0x3, 0x0, 0x80}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/169, 0xdb, 0xa9, 0x0, 0xa, 0x0, @void, @value}, 0x28) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="606e0000f7b452a176b1777a866cecf17a9f88a61c8bf244cbf572de0facdcb13348cf997cd82a702e90550a755b23ecfa00e7ac98b9149fae7cade26640f98ee7b58b3779a6c901fce88ac1081d5695a8cda1200082f2ca1e6bff420ffdb1a74dba35d632100ebbfc6d2ced5c46ba73e1823cbdb70b41af37f8bf9a893ff8ef002eeca459f414cac4c9000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000030000004c000180380004001400010002000000ac1414aa0000000000000000200002000a004e2300000749fc020000000000000000000000000001030000000d0001007564703a73797a3200000000"], 0x60}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000300)=0x10, 0x4) 54.561573478s ago: executing program 2 (id=1678): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, &(0x7f0000000100)={0x40, 0x0, 0x8, {0x8, 0x23, "582cd5ab4073"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 53.699400149s ago: executing program 2 (id=1687): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/140}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 53.677703181s ago: executing program 2 (id=1688): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0xffffffffffffffff) open(&(0x7f0000000580)='./bus\x00', 0x1c1142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 53.578747262s ago: executing program 2 (id=1689): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 52.65038259s ago: executing program 2 (id=1697): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x401, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) shutdown(0xffffffffffffffff, 0x2) r6 = dup3(0xffffffffffffffff, r4, 0x0) write$binfmt_elf64(r6, 0x0, 0xfe00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpgid(0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000000300)=@framed={{}, [@exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffff, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setreuid(0x0, 0xee01) 52.196989633s ago: executing program 2 (id=1699): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0xffffffffffffffff) open(&(0x7f0000000580)='./bus\x00', 0x1c1142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 51.957966601s ago: executing program 34 (id=1699): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0xffffffffffffffff) open(&(0x7f0000000580)='./bus\x00', 0x1c1142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 8.388345715s ago: executing program 3 (id=2070): ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 8.235660073s ago: executing program 3 (id=2074): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.123761784s ago: executing program 7 (id=2119): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a20001280080001006873720014000280080002", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 5.115499726s ago: executing program 7 (id=2120): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x44e, 0x4, 0x3], 0x0, 0x0, 0x44e, 0x1}}, 0x40) 5.08064483s ago: executing program 7 (id=2121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setregid(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x140, 0x10, 0x1, 0x1, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x140}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r3, 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1fcd", 0x15, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4.115888382s ago: executing program 4 (id=2134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) utimes(0x0, 0x0) 3.946286491s ago: executing program 4 (id=2136): set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 3.583682694s ago: executing program 4 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a20001280080001006873720014000280080002", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 3.412873784s ago: executing program 4 (id=2143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 3.293911447s ago: executing program 3 (id=2144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x7a, &(0x7f0000001480)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "935705", 0x44, 0x2f, 0x1, @local, @private2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x48, 0x3, 0x0, 0x1, 0x1, 0x6}, 0x1, {0xffff}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x1, 0x2, 0x1, 0x3, 0x5, 0x9}, 0x2, {0x3, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 3.190589999s ago: executing program 4 (id=2146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2e7d, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 3.022694539s ago: executing program 3 (id=2149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r1, 0x1, 0x0, 0xfffffffe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.880083785s ago: executing program 4 (id=2150): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x0, 0xfffc, 0x800, 0x0, 0x1, 0x0, 0x801, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.793994875s ago: executing program 3 (id=2153): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 2.615561856s ago: executing program 3 (id=2155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.359440556s ago: executing program 0 (id=2158): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x31, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078"}}}}}}, 0x0) 2.084473268s ago: executing program 0 (id=2159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="84dc9be0172971aa8f9cfacb75a7d1a1431647395e88f819f2dd9b94c9c259c1e6670e588b42f9f1c9acd254f67ecbd203"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x225}, {r1, 0x761c}], 0x2, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 1.350393513s ago: executing program 0 (id=2163): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r1, 0x0, 0x0) 1.2946428s ago: executing program 7 (id=2164): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5c12, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 1.073238875s ago: executing program 0 (id=2167): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) 874.404648ms ago: executing program 0 (id=2169): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078ee"}}}}}}, 0x0) 848.641931ms ago: executing program 7 (id=2170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") 738.631684ms ago: executing program 0 (id=2172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x40, 0x0, 0x7, {0x7, 0x23, "582cd5ab40"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 670.230792ms ago: executing program 6 (id=2173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="84dc9be0172971aa8f9cfacb75a7d1a1431647395e88f819f2dd9b94c9c259c1e6670e588b42f9f1c9acd254f67ecbd203"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x225}, {r1, 0x761c}], 0x2, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 543.354026ms ago: executing program 7 (id=2174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setregid(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x140, 0x10, 0x1, 0x1, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x140}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r3, 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1fcd", 0x15, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 390.210685ms ago: executing program 6 (id=2175): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 285.842257ms ago: executing program 6 (id=2176): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 197.101107ms ago: executing program 6 (id=2177): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r1, 0x0, 0x0) 120.030716ms ago: executing program 6 (id=2178): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}], 0x1, 0x0) 0s ago: executing program 6 (id=2179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): T27] audit: type=1326 audit(1730395354.304:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 312.106950][ T27] audit: type=1326 audit(1730395354.304:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 312.137713][ T27] audit: type=1326 audit(1730395354.304:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 312.243935][ T27] audit: type=1326 audit(1730395354.534:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 312.296767][ T27] audit: type=1326 audit(1730395354.554:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 312.311208][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1397'. [ 312.344729][ T27] audit: type=1326 audit(1730395354.554:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 312.387501][ T27] audit: type=1326 audit(1730395354.554:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 312.408549][ T8783] 9pnet_fd: Insufficient options for proto=fd [ 312.412961][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.445725][ T4293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.461610][ T27] audit: type=1326 audit(1730395354.554:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 312.473174][ T4324] Error reading MAC address [ 312.484490][ T4293] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 312.497921][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.508336][ T4293] usb 5-1: config 0 descriptor?? [ 312.521774][ T4324] usb 4-1: USB disconnect, device number 31 [ 312.557941][ T8787] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1399'. [ 312.650013][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1400'. [ 312.987000][ T4293] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x2 [ 312.995101][ T4293] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x4 [ 313.011761][ T4293] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 313.212825][ T4293] cp2112 0003:10C4:EA90.0008: Part Number: 0x6A Device Version: 0xAF [ 313.432648][ T4293] cp2112 0003:10C4:EA90.0008: error requesting SMBus config [ 313.442261][ T4293] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 313.472865][ T4293] usb 5-1: USB disconnect, device number 31 [ 313.748179][ T8802] lo speed is unknown, defaulting to 1000 [ 314.175540][ T8808] device bridge0 entered promiscuous mode [ 314.221280][ T8808] device bridge0 left promiscuous mode [ 314.400772][ T8816] __nla_validate_parse: 1 callbacks suppressed [ 314.400791][ T8816] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1411'. [ 314.420375][ T8817] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 314.496558][ T8817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 314.765239][ T8826] loop4: detected capacity change from 0 to 512 [ 314.794056][ T8826] EXT4-fs (loop4): orphan cleanup on readonly fs [ 314.802642][ T8826] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 314.816573][ T8826] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1416: invalid indirect mapped block 2683928664 (level 1) [ 314.837528][ T8826] EXT4-fs (loop4): Remounting filesystem read-only [ 314.844969][ T8826] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 314.868998][ T8826] EXT4-fs (loop4): Remounting filesystem read-only [ 314.878723][ T8826] EXT4-fs (loop4): 1 truncate cleaned up [ 314.885071][ T4235] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 314.893928][ T8826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 314.931857][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 315.013608][ T8831] loop0: detected capacity change from 0 to 512 [ 315.064217][ T8831] __quota_error: 280 callbacks suppressed [ 315.064234][ T8831] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 315.106011][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1420'. [ 315.149022][ T8831] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 315.174717][ T27] audit: type=1326 audit(1730395357.464:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.230808][ T8831] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1418: Failed to acquire dquot type 1 [ 315.247653][ T27] audit: type=1326 audit(1730395357.464:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.250914][ T8840] lo speed is unknown, defaulting to 1000 [ 315.282876][ T26] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 315.292826][ T4235] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 315.302736][ T8831] EXT4-fs (loop0): 1 truncate cleaned up [ 315.302771][ T8831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.302861][ T8831] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.332229][ T27] audit: type=1326 audit(1730395357.464:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.355363][ T4235] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 315.368095][ T27] audit: type=1326 audit(1730395357.464:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.396447][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 315.397204][ T27] audit: type=1326 audit(1730395357.464:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.426986][ T27] audit: type=1326 audit(1730395357.464:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.449991][ T27] audit: type=1326 audit(1730395357.464:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.475052][ T27] audit: type=1326 audit(1730395357.464:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 315.552870][ T4235] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 315.566566][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.576361][ T4235] usb 3-1: Product: syz [ 315.591905][ T4235] usb 3-1: Manufacturer: syz [ 315.601409][ T4235] usb 3-1: SerialNumber: syz [ 315.614420][ T4235] usb 3-1: config 0 descriptor?? [ 315.642909][ T8820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.660438][ T8820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.700080][ T8846] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1423'. [ 315.713072][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.731527][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.752529][ T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.761606][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.799030][ T26] usb 4-1: config 0 descriptor?? [ 315.892298][ T8820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.901459][ T8820] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.112611][ T4293] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 316.147238][ T8860] lo speed is unknown, defaulting to 1000 [ 316.362825][ T4235] Error reading MAC address [ 316.384468][ T4235] usb 3-1: USB disconnect, device number 26 [ 316.402717][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 316.409262][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 316.434412][ T26] usb 4-1: USB disconnect, device number 32 [ 316.493180][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.505941][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.517157][ T4293] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 316.526439][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.550182][ T4293] usb 1-1: config 0 descriptor?? [ 316.685198][ T3580] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 316.940833][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947222][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.982686][ T3580] usb 7-1: Using ep0 maxpacket: 16 [ 317.089601][ T8876] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1435'. [ 317.322898][ T3580] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 317.350806][ T3580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.468900][ T3580] usb 7-1: Product: syz [ 317.514177][ T3580] usb 7-1: Manufacturer: syz [ 317.579780][ T3580] usb 7-1: SerialNumber: syz [ 317.671015][ T3580] usb 7-1: config 0 descriptor?? [ 317.796967][ T3580] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 318.012743][ T3580] gp8psk: usb in 128 operation failed. [ 318.052712][ T3580] gp8psk: usb in 137 operation failed. [ 318.089309][ T3580] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.153037][ T3580] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 318.192861][ T3580] usb 7-1: media controller created [ 318.346989][ T3580] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.506896][ T8896] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 318.550348][ T3580] gp8psk_fe: Frontend revision 1 attached [ 318.560362][ T3580] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 318.612798][ T3580] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 318.902910][ T3580] gp8psk: usb in 138 operation failed. [ 318.908419][ T3580] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 318.933038][ T3580] gp8psk: found Genpix USB device pID = 201 (hex) [ 318.946465][ T3580] usb 7-1: USB disconnect, device number 23 [ 318.965914][ T4293] usbhid 1-1:0.0: can't add hid device: -71 [ 318.971952][ T4293] usbhid: probe of 1-1:0.0 failed with error -71 [ 318.982802][ T4324] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 319.016386][ T4293] usb 1-1: USB disconnect, device number 34 [ 319.081329][ T3580] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 319.352927][ T4324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.517429][ T8927] loop0: detected capacity change from 0 to 2048 [ 319.553037][ T4324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.595026][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.611155][ T8927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 319.666899][ T4324] usb 4-1: Product: syz [ 319.701795][ T4324] usb 4-1: Manufacturer: syz [ 319.750326][ T4324] usb 4-1: SerialNumber: syz [ 319.763413][ T8939] loop4: detected capacity change from 0 to 512 [ 319.772311][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 319.815340][ T4324] hub 4-1:1.0: bad descriptor, ignoring hub [ 319.821870][ T8939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 319.834221][ T4324] hub: probe of 4-1:1.0 failed with error -5 [ 319.850714][ T8939] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.948117][ T8947] device bridge0 entered promiscuous mode [ 319.960978][ T8947] device bridge0 left promiscuous mode [ 320.005972][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 320.012827][ T3580] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 320.403005][ T3580] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.415991][ T3580] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.426380][ T3580] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 320.435938][ T3580] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.463330][ T3580] usb 7-1: config 0 descriptor?? [ 320.618887][ T8970] loop2: detected capacity change from 0 to 2048 [ 320.635929][ T8970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 320.658975][ T8970] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 320.696632][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 320.847363][ T8977] loop4: detected capacity change from 0 to 128 [ 320.935132][ T4324] cdc_ncm 4-1:1.0: failed to get mac address [ 320.950217][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 320.950231][ T27] audit: type=1800 audit(1730395363.234:744): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1474" name="bus" dev="loop4" ino=1048624 res=0 errno=0 [ 320.987512][ T4324] cdc_ncm 4-1:1.0: bind() failure [ 321.019007][ T8979] loop2: detected capacity change from 0 to 512 [ 321.042056][ T8977] bio_check_eod: 12 callbacks suppressed [ 321.042074][ T8977] syz.4.1474: attempt to access beyond end of device [ 321.042074][ T8977] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 321.063139][ T4324] hub: probe of 4-1:1.1 failed with error -71 [ 321.088568][ T8981] loop0: detected capacity change from 0 to 512 [ 321.110943][ T8979] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 321.130624][ T4324] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 321.160811][ T8981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 321.170516][ T8981] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.175448][ T4324] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 321.192841][ T8979] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 321.229685][ T4324] usbtest: probe of 4-1:1.1 failed with error -71 [ 321.229939][ T27] audit: type=1800 audit(1730395363.514:745): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1476" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 321.262583][ T8979] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.1475: Failed to acquire dquot type 1 [ 321.295839][ T4514] kworker/u4:11: attempt to access beyond end of device [ 321.295839][ T4514] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 321.326131][ T4324] usb 4-1: USB disconnect, device number 33 [ 321.337592][ T8979] EXT4-fs (loop2): 1 truncate cleaned up [ 321.379380][ T8979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 321.417529][ T8979] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.445958][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 321.560500][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 321.687446][ T27] audit: type=1326 audit(1730395363.974:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 321.730814][ T8998] loop0: detected capacity change from 0 to 512 [ 321.774690][ T9000] ALSA: seq fatal error: cannot create timer (-22) [ 321.835195][ T27] audit: type=1326 audit(1730395364.004:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 321.922587][ T4292] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 321.937114][ T27] audit: type=1326 audit(1730395364.004:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 321.962819][ T27] audit: type=1326 audit(1730395364.004:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 321.964323][ T8998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 321.986734][ T27] audit: type=1326 audit(1730395364.004:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 322.016804][ T27] audit: type=1326 audit(1730395364.004:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.3.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f351097e719 code=0x7ffc0000 [ 322.177931][ T8998] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.304287][ T8998] Process accounting resumed [ 322.322847][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.444925][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.459592][ T8998] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 322.578933][ T4292] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 322.613016][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.642575][ T4292] usb 5-1: config 0 descriptor?? [ 322.745066][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 322.809346][ T9016] loop0: detected capacity change from 0 to 512 [ 322.885353][ T9016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 322.912751][ T9016] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.022721][ T3580] usbhid 7-1:0.0: can't add hid device: -71 [ 323.028745][ T3580] usbhid: probe of 7-1:0.0 failed with error -71 [ 323.042270][ T3580] usb 7-1: USB disconnect, device number 24 [ 323.087648][ T9024] netlink: 'syz.2.1491': attribute type 10 has an invalid length. [ 323.142183][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 323.156230][ T9024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 323.226285][ T4292] usbhid 5-1:0.0: can't add hid device: -71 [ 323.232311][ T4292] usbhid: probe of 5-1:0.0 failed with error -71 [ 323.255055][ T4292] usb 5-1: USB disconnect, device number 32 [ 323.442653][ T26] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 323.561889][ T9041] loop0: detected capacity change from 0 to 512 [ 323.569845][ T9041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.589085][ T9041] EXT4-fs (loop0): 1 truncate cleaned up [ 323.596249][ T9041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 323.667006][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 323.682942][ T3580] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 323.770605][ T9047] device bridge0 entered promiscuous mode [ 323.779101][ T9047] device bridge0 left promiscuous mode [ 323.838413][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.032871][ T4292] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 324.040564][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.049883][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.058458][ T3580] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 324.067733][ T26] usb 4-1: Product: syz [ 324.071901][ T26] usb 4-1: Manufacturer: syz [ 324.076853][ T3580] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.085205][ T26] usb 4-1: SerialNumber: syz [ 324.095418][ T3580] usb 7-1: config 0 descriptor?? [ 324.143262][ T26] hub 4-1:1.0: bad descriptor, ignoring hub [ 324.149260][ T26] hub: probe of 4-1:1.0 failed with error -5 [ 324.422829][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.434079][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.446765][ T4292] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 324.458303][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.472375][ T4292] usb 1-1: config 0 descriptor?? [ 324.897790][ T9058] netlink: 'syz.4.1505': attribute type 10 has an invalid length. [ 325.086978][ T9065] ALSA: seq fatal error: cannot create timer (-22) [ 325.222889][ T26] cdc_ncm 4-1:1.0: failed to get mac address [ 325.254107][ T26] cdc_ncm 4-1:1.0: bind() failure [ 325.302844][ T26] hub: probe of 4-1:1.1 failed with error -71 [ 325.321520][ T9075] device pim6reg1 entered promiscuous mode [ 325.327943][ T26] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 325.354071][ T26] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 325.382725][ T26] usbtest: probe of 4-1:1.1 failed with error -71 [ 325.445603][ T26] usb 4-1: USB disconnect, device number 34 [ 326.188643][ T9092] netlink: 'syz.4.1517': attribute type 10 has an invalid length. [ 326.427589][ T9100] loop4: detected capacity change from 0 to 512 [ 326.472842][ T9100] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 326.502742][ T3580] pegasus 7-1:0.0: setup Pegasus II specific registers [ 326.582666][ T9104] loop2: detected capacity change from 0 to 512 [ 326.590492][ T9104] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.598542][ T9104] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 326.669259][ T9104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 326.679655][ T9104] System zones: 1-12 [ 326.687714][ T9104] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1521: corrupted in-inode xattr [ 326.715511][ T9104] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1521: couldn't read orphan inode 15 (err -117) [ 326.728031][ T9104] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 326.922733][ T4292] usbhid 1-1:0.0: can't add hid device: -71 [ 326.928754][ T4292] usbhid: probe of 1-1:0.0 failed with error -71 [ 326.968624][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 326.983053][ T4292] usb 1-1: USB disconnect, device number 35 [ 327.122137][ T9121] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1529'. [ 327.261017][ T9130] loop2: detected capacity change from 0 to 512 [ 327.331907][ T9134] device bridge0 entered promiscuous mode [ 327.339879][ T9130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 327.356845][ T9130] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.358460][ T9134] device bridge0 left promiscuous mode [ 327.428058][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 327.428072][ T27] audit: type=1800 audit(1730395369.714:794): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1533" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D08 dev="loop2" ino=19 res=0 errno=0 [ 327.508913][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 327.565676][ T22] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 327.628423][ T9139] loop0: detected capacity change from 0 to 512 [ 327.670465][ T9139] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 327.680740][ T9139] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 327.695809][ T9139] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.1537: Failed to acquire dquot type 1 [ 327.744076][ T9139] EXT4-fs (loop0): 1 truncate cleaned up [ 327.749784][ T9139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 327.763035][ T9139] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.772659][ T3580] pegasus 7-1:0.0: can't locate MII phy, using default [ 327.798255][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 327.821783][ T3580] pegasus 7-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 86:ce:77:55:12:9d [ 327.861654][ T9149] loop2: detected capacity change from 0 to 128 [ 327.871834][ T3580] usb 7-1: USB disconnect, device number 25 [ 327.898667][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 327.982866][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.991943][ T27] audit: type=1800 audit(1730395370.274:795): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1540" name="bus" dev="loop2" ino=1048625 res=0 errno=0 [ 328.009615][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.029294][ T22] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 328.067066][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.089712][ T22] usb 4-1: config 0 descriptor?? [ 328.092266][ T9149] syz.2.1540: attempt to access beyond end of device [ 328.092266][ T9149] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 328.155558][ T9156] loop0: detected capacity change from 0 to 1024 [ 328.177990][ T9156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.205826][ T27] audit: type=1800 audit(1730395370.494:796): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1543" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 328.211427][ T4382] kworker/u4:7: attempt to access beyond end of device [ 328.211427][ T4382] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 328.262705][ T14] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 328.311250][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 328.334874][ T9160] IPVS: Error joining to the multicast group [ 328.425853][ T9162] loop6: detected capacity change from 0 to 512 [ 328.492299][ T9162] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 328.505176][ T9167] loop2: detected capacity change from 0 to 1024 [ 328.524464][ T9167] EXT4-fs: Ignoring removed oldalloc option [ 328.531616][ T9162] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.532650][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 328.610880][ T27] audit: type=1800 audit(1730395370.894:797): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1546" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D08 dev="loop6" ino=19 res=0 errno=0 [ 328.665055][ T9167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.682778][ T14] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 328.750522][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 328.762418][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.883467][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.893418][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.897221][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 328.903409][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.903455][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.939063][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.081784][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 329.342633][ T14] usb 5-1: usb_control_msg returned -32 [ 329.348325][ T14] usbtmc 5-1:16.0: can't read capabilities [ 329.612060][ T27] audit: type=1326 audit(1730395371.894:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9187 comm="syz.0.1553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x0 [ 330.027988][ T9192] loop6: detected capacity change from 0 to 128 [ 330.079741][ T27] audit: type=1800 audit(1730395372.364:799): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1554" name="bus" dev="loop6" ino=1048626 res=0 errno=0 [ 330.180949][ T9192] syz.6.1554: attempt to access beyond end of device [ 330.180949][ T9192] loop6: rw=0, sector=121, nr_sectors = 119 limit=128 [ 330.286009][ T6302] kworker/u4:17: attempt to access beyond end of device [ 330.286009][ T6302] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 330.387512][ T9197] loop3: detected capacity change from 0 to 1764 [ 330.446783][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 330.456345][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1556'. [ 330.457968][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 330.519196][ T22] usb 4-1: USB disconnect, device number 35 [ 330.589921][ T9204] loop0: detected capacity change from 0 to 128 [ 330.610051][ T27] audit: type=1800 audit(1730395372.894:800): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1560" name="bus" dev="loop0" ino=1048627 res=0 errno=0 [ 330.627307][ T9205] loop3: detected capacity change from 0 to 512 [ 330.659098][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 330.677183][ T9209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1562'. [ 330.685119][ T9205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 330.696316][ T9205] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.768519][ T27] audit: type=1800 audit(1730395373.054:801): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1559" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D08 dev="loop3" ino=19 res=0 errno=0 [ 330.862022][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 331.082562][ T14] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 331.252966][ T22] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 331.332817][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 331.342738][ T4235] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 331.452679][ T14] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 331.461060][ T14] usb 7-1: config 179 has no interface number 0 [ 331.467798][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 331.479874][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 331.491308][ T14] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 331.501695][ T14] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 331.502547][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 331.515230][ T14] usb 7-1: config 179 interface 65 has no altsetting 0 [ 331.527212][ T14] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 331.536447][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.562737][ T9213] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 331.582711][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 331.662681][ T22] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 331.670889][ T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.683246][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.694827][ T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 331.705937][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 331.727123][ T22] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.740552][ T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 331.749714][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.818176][ T22] usbtmc: probe of 4-1:16.0 failed with error -22 [ 331.869226][ T4235] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 331.884033][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.898162][ T4235] usb 3-1: Product: syz [ 331.902352][ T4235] usb 3-1: Manufacturer: syz [ 331.909735][ T4235] usb 3-1: SerialNumber: syz [ 331.920809][ T4340] usb 7-1: USB disconnect, device number 26 [ 331.930422][ T4235] usb 3-1: config 0 descriptor?? [ 332.110810][ T9235] loop0: detected capacity change from 0 to 1764 [ 332.310245][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 332.452304][ T9251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1575'. [ 332.487137][ T9253] loop6: detected capacity change from 0 to 512 [ 332.529038][ T9253] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 332.538289][ T9253] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.575519][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 332.575532][ T27] audit: type=1800 audit(1730395374.864:806): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1576" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D08 dev="loop6" ino=19 res=0 errno=0 [ 332.633193][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 332.691460][ T9261] binder: BINDER_SET_CONTEXT_MGR already set [ 332.713136][ T9261] binder: 9260:9261 ioctl 4018620d 20000040 returned -16 [ 332.984646][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 333.175685][ T9287] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1587'. [ 333.279152][ T9291] Cannot find set identified by id 0 to match [ 333.666522][ T9304] loop6: detected capacity change from 0 to 1024 [ 333.674847][ T9304] EXT4-fs: Ignoring removed bh option [ 333.680939][ T9304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.706856][ T9304] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 333.765040][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 333.902844][ T22] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 334.094966][ T26] usb 3-1: USB disconnect, device number 27 [ 334.162835][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 334.163306][ T4340] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 334.342873][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 334.350829][ T22] usb 1-1: can't read configurations, error -61 [ 334.412603][ T4340] usb 7-1: Using ep0 maxpacket: 8 [ 334.504552][ T22] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 334.670362][ T9316] loop2: detected capacity change from 0 to 128 [ 334.685719][ T27] audit: type=1800 audit(1730395376.974:807): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1599" name="bus" dev="loop2" ino=1048628 res=0 errno=0 [ 334.693169][ T4340] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 334.732583][ T4340] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.740639][ T4340] usb 7-1: Product: syz [ 334.745172][ T4340] usb 7-1: Manufacturer: syz [ 334.749800][ T4340] usb 7-1: SerialNumber: syz [ 334.760340][ T4340] usb 7-1: config 0 descriptor?? [ 334.762693][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 334.792644][ T9189] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 334.814838][ T4340] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 334.829281][ T4292] usb 5-1: USB disconnect, device number 33 [ 334.851979][ T4324] usb 4-1: USB disconnect, device number 36 [ 334.890768][ T27] audit: type=1326 audit(1730395377.174:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 334.947045][ T27] audit: type=1326 audit(1730395377.174:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 334.970791][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 334.983797][ T22] usb 1-1: can't read configurations, error -61 [ 334.993671][ T22] usb usb1-port1: attempt power cycle [ 335.025609][ T27] audit: type=1326 audit(1730395377.174:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.032830][ T4340] gspca_vc032x: reg_r err -32 [ 335.060493][ T4340] vc032x: probe of 7-1:0.0 failed with error -32 [ 335.064543][ T9323] loop3: detected capacity change from 0 to 2048 [ 335.083550][ T27] audit: type=1326 audit(1730395377.184:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.108777][ T27] audit: type=1326 audit(1730395377.184:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.143128][ T27] audit: type=1326 audit(1730395377.184:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.166800][ T27] audit: type=1326 audit(1730395377.184:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.189885][ T27] audit: type=1326 audit(1730395377.184:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.2.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 335.221123][ T9323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 335.280281][ T9323] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 335.315690][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 335.428200][ T22] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 335.522829][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 335.694761][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 335.702400][ T22] usb 1-1: can't read configurations, error -61 [ 335.852661][ T22] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 335.965066][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 336.048597][ T9351] loop4: detected capacity change from 0 to 512 [ 336.070757][ T9351] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.080646][ T9351] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 336.095724][ T9351] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 336.107502][ T9351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 336.116047][ T9351] System zones: 0-2, 18-18, 34-34 [ 336.126972][ T9351] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 336.132708][ T4324] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 336.143292][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 336.162417][ T22] usb 1-1: can't read configurations, error -61 [ 336.169262][ T9351] EXT4-fs (loop4): 1 truncate cleaned up [ 336.175052][ T9351] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.183769][ T22] usb usb1-port1: unable to enumerate USB device [ 336.410632][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 336.412662][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 336.512205][ T9358] loop4: detected capacity change from 0 to 2048 [ 336.512252][ T9360] loop3: detected capacity change from 0 to 1024 [ 336.526206][ T9360] EXT4-fs: Ignoring removed orlov option [ 336.531883][ T9360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.542743][ T4324] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 336.555967][ T4324] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.566717][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.577125][ T4324] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.587679][ T4324] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.589193][ T9360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 336.609700][ T4324] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.615478][ T9358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.627600][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.759053][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 336.760277][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 336.902607][ T4324] usb 3-1: usb_control_msg returned -32 [ 336.914276][ T4324] usbtmc 3-1:16.0: can't read capabilities [ 336.957633][ T26] usb 7-1: USB disconnect, device number 27 [ 337.124156][ T4235] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 337.322938][ T4235] usb 5-1: device descriptor read/64, error -71 [ 338.022981][ T9397] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 338.174867][ T9400] loop3: detected capacity change from 0 to 2048 [ 338.206892][ T9400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 338.222680][ T4235] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 338.265957][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 338.285188][ T9406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1630'. [ 338.298809][ T9406] netlink: 'syz.0.1630': attribute type 10 has an invalid length. [ 338.319173][ T9406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 338.412774][ T4235] usb 5-1: device descriptor read/64, error -71 [ 338.532923][ T4235] usb usb5-port1: attempt power cycle [ 338.560166][ T9418] loop0: detected capacity change from 0 to 512 [ 338.596668][ T9418] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.606044][ T9418] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 338.629058][ T9418] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 338.639051][ T9418] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 338.649694][ T9418] System zones: 0-2, 18-18, 34-34 [ 338.664685][ T9418] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 338.685463][ T9418] EXT4-fs (loop0): 1 truncate cleaned up [ 338.691362][ T9418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.700463][ T22] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 338.952567][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 338.982573][ T4235] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 339.076036][ T4235] usb 5-1: device descriptor read/8, error -71 [ 339.111172][ T4292] usb 3-1: USB disconnect, device number 28 [ 339.252019][ T9426] loop2: detected capacity change from 0 to 1024 [ 339.275483][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 339.285384][ T9426] EXT4-fs: Ignoring removed nobh option [ 339.290983][ T9426] EXT4-fs: Ignoring removed i_version option [ 339.298153][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.306967][ T22] usb 4-1: Product: syz [ 339.311563][ T9426] EXT4-fs: Ignoring removed orlov option [ 339.317697][ T22] usb 4-1: Manufacturer: syz [ 339.323174][ T22] usb 4-1: SerialNumber: syz [ 339.330603][ T22] usb 4-1: config 0 descriptor?? [ 339.341395][ T9426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 339.342608][ T4235] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 339.389998][ T27] kauditd_printk_skb: 245 callbacks suppressed [ 339.390014][ T27] audit: type=1326 audit(1730395381.674:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.394401][ T22] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 339.400048][ T27] audit: type=1326 audit(1730395381.674:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.488254][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 339.492777][ T4235] usb 5-1: device descriptor read/8, error -71 [ 339.500306][ T27] audit: type=1326 audit(1730395381.674:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.542735][ T27] audit: type=1326 audit(1730395381.674:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.570779][ T27] audit: type=1326 audit(1730395381.734:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.622719][ T22] gspca_vc032x: reg_r err -32 [ 339.627512][ T22] vc032x: probe of 4-1:0.0 failed with error -32 [ 339.632604][ T27] audit: type=1326 audit(1730395381.734:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9425 comm="syz.2.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209457e719 code=0x7ffc0000 [ 339.635325][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 339.661243][ T4235] usb usb5-port1: unable to enumerate USB device [ 339.775809][ T9436] loop0: detected capacity change from 0 to 1764 [ 339.877000][ T9438] loop6: detected capacity change from 0 to 2048 [ 339.909305][ T9438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 339.986589][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 340.068913][ T9449] loop6: detected capacity change from 0 to 512 [ 340.139199][ T9449] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 340.151065][ T9449] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.188277][ T27] audit: type=1800 audit(1730395382.474:1067): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1646" name="bus" dev="loop6" ino=19 res=0 errno=0 [ 340.268332][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 340.359194][ T27] audit: type=1326 audit(1730395382.644:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 340.383313][ T27] audit: type=1326 audit(1730395382.644:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 340.385833][ T22] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 340.416947][ T27] audit: type=1326 audit(1730395382.644:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 340.609187][ T9472] loop6: detected capacity change from 0 to 2048 [ 340.683024][ T9472] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 340.691562][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 340.787644][ T9481] tmpfs: Bad value for 'mpol' [ 340.809280][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 340.832747][ T22] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 340.861917][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.892399][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.903598][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.918012][ T22] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.931495][ T22] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.945582][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.222687][ T22] usb 5-1: usb_control_msg returned -32 [ 341.233854][ T22] usbtmc 5-1:16.0: can't read capabilities [ 341.600200][ T9500] loop2: detected capacity change from 0 to 2048 [ 341.687921][ T9500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 341.750630][ T9500] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 341.836218][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 341.952619][ T9453] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 341.959879][ T26] usb 5-1: USB disconnect, device number 38 [ 342.060529][ T9512] netem: change failed [ 342.501053][ T9518] loop2: detected capacity change from 0 to 2048 [ 342.570127][ T4235] usb 4-1: USB disconnect, device number 37 [ 342.689217][ T9518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.829922][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 342.949398][ T9537] loop0: detected capacity change from 0 to 2048 [ 342.980340][ T9537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 343.039598][ T9537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 343.178002][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 343.205894][ T9546] netem: change failed [ 343.500875][ T9548] loop0: detected capacity change from 0 to 512 [ 343.545738][ T9548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 343.587349][ T9548] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.739535][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 343.836882][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 343.837102][ T9568] loop2: detected capacity change from 0 to 128 [ 343.933766][ T9572] loop0: detected capacity change from 0 to 1764 [ 343.959262][ T9572] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 344.009586][ T9568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.082763][ T22] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 344.113335][ T9568] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.157165][ T9575] netem: change failed [ 344.333338][ T9568] loop2: detected capacity change from 128 to 64 [ 344.363270][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 344.371486][ T9587] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 344.387027][ T9587] EXT4-fs error (device loop2): ext4_ext_tree_init:879: inode #13: comm syz.2.1689: mark_inode_dirty error [ 344.508882][ T9587] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 344.522835][ T9587] EXT4-fs error (device loop2): __ext4_new_inode:1350: inode #13: comm syz.2.1689: mark_inode_dirty error [ 344.541995][ T9587] EXT4-fs error (device loop2) in __ext4_new_inode:1352: Out of memory [ 344.551064][ T22] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 344.561534][ T22] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.572197][ T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.582772][ T9587] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 344.592847][ T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 344.603341][ T9587] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #13: comm syz.2.1689: mark_inode_dirty error [ 344.617052][ T22] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.631311][ T22] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.641061][ T9587] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -12) [ 344.653439][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.744715][ T4253] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 344.842725][ T4253] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 344.972878][ T22] usb 7-1: usb_control_msg returned -32 [ 344.980950][ T22] usbtmc 7-1:16.0: can't read capabilities [ 345.049490][ T4905] EXT4-fs (loop2): unmounting filesystem. [ 345.290813][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.429646][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.531830][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.631159][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.692655][ T9595] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 345.700213][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.713171][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.721547][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.734472][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.747409][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.754650][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.971271][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 345.971285][ T27] audit: type=1326 audit(1730395388.254:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 346.016721][ T9596] lo speed is unknown, defaulting to 1000 [ 346.055765][ T27] audit: type=1326 audit(1730395388.254:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 346.142105][ T27] audit: type=1326 audit(1730395388.254:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f235d17d3aa code=0x7ffc0000 [ 346.239945][ T27] audit: type=1326 audit(1730395388.254:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f235d1b0805 code=0x7ffc0000 [ 346.313845][ T27] audit: type=1326 audit(1730395388.454:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 346.410269][ T27] audit: type=1326 audit(1730395388.454:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235d17e719 code=0x7ffc0000 [ 346.458135][ T27] audit: type=1326 audit(1730395388.654:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9602 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 346.511351][ T27] audit: type=1326 audit(1730395388.654:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9602 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 346.575037][ T27] audit: type=1326 audit(1730395388.674:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9602 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 346.654708][ T27] audit: type=1326 audit(1730395388.674:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9602 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 346.690273][ T9610] loop0: detected capacity change from 0 to 1764 [ 346.752285][ T9610] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 346.815043][ T4292] usb 7-1: USB disconnect, device number 28 [ 347.198116][ T9622] netem: change failed [ 347.416247][ T9596] chnl_net:caif_netlink_parms(): no params data found [ 347.438837][ T9634] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.447256][ T9631] loop3: detected capacity change from 0 to 2048 [ 347.569965][ T9631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 347.614975][ T9631] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 347.750495][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 347.813053][ T4260] Bluetooth: hci3: command tx timeout [ 348.133837][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.140968][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.199397][ T9596] device bridge_slave_0 entered promiscuous mode [ 348.266552][ T9647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1712'. [ 348.288886][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.308067][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.327849][ T9596] device bridge_slave_1 entered promiscuous mode [ 348.509780][ T9657] loop3: detected capacity change from 0 to 1764 [ 348.601661][ T9657] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 348.705642][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.752700][ T4292] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 348.775906][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.927913][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 349.003768][ T4292] usb 5-1: Using ep0 maxpacket: 8 [ 349.057039][ T9596] team0: Port device team_slave_0 added [ 349.153555][ T4292] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 349.164245][ T4292] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.184536][ T4292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.206721][ T4292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.227465][ T4292] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.260468][ T4292] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.279634][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.329719][ T9596] team0: Port device team_slave_1 added [ 349.523857][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.552349][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.578871][ T4292] usb 5-1: usb_control_msg returned -32 [ 349.584810][ T4292] usbtmc 5-1:16.0: can't read capabilities [ 349.660859][ T9681] loop3: detected capacity change from 0 to 1764 [ 349.669232][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.698516][ T9681] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 349.711611][ T11] device hsr_slave_0 left promiscuous mode [ 349.725058][ T9681] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 349.740686][ T11] device hsr_slave_1 left promiscuous mode [ 349.765033][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.811097][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.875054][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.892568][ T4260] Bluetooth: hci3: command tx timeout [ 349.942016][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.996228][ T11] device bridge_slave_1 left promiscuous mode [ 350.004518][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.021320][ T11] device bridge_slave_0 left promiscuous mode [ 350.036861][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.100517][ T11] device veth1_vlan left promiscuous mode [ 350.106756][ T11] device veth0_vlan left promiscuous mode [ 350.283297][ T9701] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 351.080373][ T11] team0 (unregistering): Port device team_slave_1 removed [ 351.160891][ T11] team0 (unregistering): Port device team_slave_0 removed [ 351.212662][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.266794][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.474237][ T4340] usb 5-1: USB disconnect, device number 39 [ 351.623460][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 351.692356][ T9714] loop4: detected capacity change from 0 to 1764 [ 351.807582][ T9714] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 351.972560][ T4259] Bluetooth: hci3: command tx timeout [ 352.457255][ T11] bond0 (unregistering): Released all slaves [ 352.648799][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.657363][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.684781][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.930964][ T9596] device hsr_slave_0 entered promiscuous mode [ 352.953924][ T9596] device hsr_slave_1 entered promiscuous mode [ 353.019707][ T9596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.042553][ T9596] Cannot create hsr debugfs directory [ 353.992548][ T14] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 354.052811][ T4259] Bluetooth: hci3: command tx timeout [ 354.262737][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 354.300009][ T9596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 354.342305][ T9596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.360864][ T9596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.382816][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 354.396295][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.406877][ T9596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 354.411939][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.449222][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.467275][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.487234][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.496816][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.687489][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.717769][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.753848][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.774544][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.796064][ T14] usb 4-1: usb_control_msg returned -32 [ 354.797848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.810007][ T14] usbtmc 4-1:16.0: can't read capabilities [ 354.821940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.846974][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.854191][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.888405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.924605][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.947977][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.966716][ T4573] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.973925][ T4573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.017037][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.035260][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.046850][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.058524][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.071248][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.082360][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.121970][ T9596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.139466][ T9596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.161525][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.181211][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.207085][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.246380][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1743'. [ 355.289371][ T9785] loop4: detected capacity change from 0 to 512 [ 355.329228][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.345297][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.356499][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.427828][ T9785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 355.486319][ T9785] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.537396][ T9794] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 355.577825][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 355.577840][ T27] audit: type=1800 audit(1730395397.864:1126): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1744" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 355.771424][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 355.935691][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.949788][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.990525][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.631759][ T4292] usb 4-1: USB disconnect, device number 38 [ 357.242649][ T3580] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 357.420896][ T9838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1755'. [ 357.512562][ T3580] usb 4-1: Using ep0 maxpacket: 32 [ 357.559988][ T9838] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 357.632752][ T3580] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.658793][ T3580] usb 4-1: config 0 has no interface number 0 [ 357.715275][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.735307][ T3580] usb 4-1: config 0 interface 1 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 357.757595][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.815013][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.825282][ T3580] usb 4-1: config 0 interface 1 has no altsetting 0 [ 357.837060][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.883195][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 357.928628][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.954150][ T9596] device veth0_vlan entered promiscuous mode [ 358.037852][ T9596] device veth1_vlan entered promiscuous mode [ 358.044356][ T3580] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 358.077989][ T3580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.128840][ T3580] usb 4-1: Product: syz [ 358.151627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.152544][ T3580] usb 4-1: Manufacturer: syz [ 358.168484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.200945][ T9596] device veth0_macvtap entered promiscuous mode [ 358.222685][ T3580] usb 4-1: SerialNumber: syz [ 358.252449][ T3580] usb 4-1: config 0 descriptor?? [ 358.263950][ T9856] loop0: detected capacity change from 0 to 512 [ 358.315462][ T9856] journal_path: Lookup failure for './file0' [ 358.327216][ T9596] device veth1_macvtap entered promiscuous mode [ 358.342660][ T9856] EXT4-fs: error: could not find journal device path [ 358.439864][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.502606][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.542582][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.602586][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.652611][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.684098][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.738763][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.766964][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.783280][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.813737][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.850571][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.871555][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.887053][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.899280][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.914829][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.928327][ T9596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.939347][ T9596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.959242][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.970204][ T125] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 358.986565][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.997424][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.009767][ T9880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1765'. [ 359.040624][ T9882] netlink: 'syz.0.1765': attribute type 10 has an invalid length. [ 359.067420][ T9596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.077614][ T9596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.102581][ T9596] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.131757][ T9596] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.212621][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 359.279887][ T4812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.303500][ T4812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.333371][ T125] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 359.352007][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.363190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.371481][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.382304][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.394120][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.411126][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.438388][ T125] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.451162][ T3580] usb 4-1: USB disconnect, device number 39 [ 359.460221][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.494695][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.516303][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.793213][ T125] usb 5-1: usb_control_msg returned -32 [ 359.798840][ T125] usbtmc 5-1:16.0: can't read capabilities [ 359.868957][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1768'. [ 359.905301][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1772'. [ 359.932117][ T9904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.993043][ T9904] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 360.080042][ T9908] loop7: detected capacity change from 0 to 512 [ 360.104479][ T27] audit: type=1326 audit(1730395402.394:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 360.139156][ T27] audit: type=1326 audit(1730395402.414:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 360.167370][ T27] audit: type=1326 audit(1730395402.414:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 360.191819][ T27] audit: type=1326 audit(1730395402.414:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 360.215982][ T9908] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 360.432620][ T27] audit: type=1326 audit(1730395402.414:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 360.487658][ T9908] Quota error (device loop7): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 360.517689][ T9908] EXT4-fs warning (device loop7): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.533029][ T9921] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 360.797613][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 361.263413][ T22] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 361.532530][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 361.672757][ T22] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.689730][ T22] usb 4-1: config 0 has no interface number 0 [ 361.717376][ T22] usb 4-1: config 0 interface 1 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 361.743605][ T125] usb 5-1: USB disconnect, device number 40 [ 361.761811][ T22] usb 4-1: config 0 interface 1 has no altsetting 0 [ 361.785254][ T9955] loop6: detected capacity change from 0 to 2048 [ 361.852637][ T9955] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 361.960532][ T27] audit: type=1800 audit(1730395404.244:1132): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1781" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 361.980612][ T22] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 361.998789][ T9969] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 362.000814][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.037747][ T22] usb 4-1: Product: syz [ 362.042738][ T22] usb 4-1: Manufacturer: syz [ 362.047366][ T22] usb 4-1: SerialNumber: syz [ 362.066785][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 362.085278][ T22] usb 4-1: config 0 descriptor?? [ 362.192643][ T125] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 362.633038][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.667783][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.696193][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1789'. [ 362.722401][ T125] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 362.770618][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.826855][ T125] usb 5-1: config 0 descriptor?? [ 363.152675][ T4293] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 363.289272][ T22] usb 4-1: USB disconnect, device number 40 [ 363.402741][ T4293] usb 7-1: Using ep0 maxpacket: 8 [ 363.434507][T10010] loop0: detected capacity change from 0 to 512 [ 363.522746][ T125] usbhid 5-1:0.0: can't add hid device: -71 [ 363.528869][ T125] usbhid: probe of 5-1:0.0 failed with error -71 [ 363.532716][ T4293] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 363.555085][ T4293] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.564509][ T125] usb 5-1: USB disconnect, device number 41 [ 363.579000][ T4293] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.605270][ T4293] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.630810][ T4293] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.669186][ T4293] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.698823][ T4293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.972885][ T4293] usb 7-1: usb_control_msg returned -32 [ 363.978935][ T4293] usbtmc 7-1:16.0: can't read capabilities [ 364.110993][T10031] loop7: detected capacity change from 0 to 512 [ 364.141378][T10031] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 364.152744][T10031] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.181210][ T27] audit: type=1800 audit(1730395406.464:1133): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1803" name="bus" dev="loop7" ino=19 res=0 errno=0 [ 364.204515][ T4293] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 364.226944][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 364.463050][ T4293] usb 4-1: Using ep0 maxpacket: 8 [ 364.717828][T10053] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 364.762780][ T4293] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 364.771898][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.780724][ T4293] usb 4-1: Product: syz [ 364.785245][ T4293] usb 4-1: Manufacturer: syz [ 364.789858][ T4293] usb 4-1: SerialNumber: syz [ 364.796768][ T4293] usb 4-1: config 0 descriptor?? [ 364.834210][ T4293] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 365.087498][T10061] loop7: detected capacity change from 0 to 128 [ 365.173574][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1810'. [ 365.202243][T10061] syz.7.1811: attempt to access beyond end of device [ 365.202243][T10061] loop7: rw=2049, sector=145, nr_sectors = 528 limit=128 [ 365.503231][ T4293] gspca_vc032x: reg_r err -32 [ 365.510469][ T4293] vc032x: probe of 4-1:0.0 failed with error -32 [ 365.796750][T10070] loop7: detected capacity change from 0 to 128 [ 366.036226][T10070] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 366.045478][T10070] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.109097][ T4290] usb 7-1: USB disconnect, device number 29 [ 366.245337][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1815'. [ 366.342209][T10080] loop5: detected capacity change from 0 to 7 [ 366.360715][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 366.390900][T10080] Dev loop5: unable to read RDB block 7 [ 366.417363][T10080] loop5: unable to read partition table [ 366.457548][T10080] loop5: partition table beyond EOD, truncated [ 366.500798][T10080] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 366.500798][T10080] ) failed (rc=-5) [ 366.913985][ T4290] usb 4-1: USB disconnect, device number 41 [ 367.051387][T10100] loop3: detected capacity change from 0 to 128 [ 367.160839][T10101] syz.3.1822: attempt to access beyond end of device [ 367.160839][T10101] loop3: rw=2049, sector=145, nr_sectors = 472 limit=128 [ 367.221749][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1826'. [ 367.477012][ T4290] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 367.488518][T10119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 367.822615][ T4290] usb 5-1: Using ep0 maxpacket: 8 [ 367.882806][ T3580] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 367.942763][ T4290] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 367.955193][ T4290] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.984429][ T4290] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.987117][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1834'. [ 367.994508][ T4290] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.082612][ T125] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 368.090417][ T4290] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.109632][ T4290] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.118936][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.172836][ T3580] usb 8-1: Using ep0 maxpacket: 8 [ 368.322700][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 368.412693][ T4290] usb 5-1: usb_control_msg returned -32 [ 368.418313][ T4290] usbtmc 5-1:16.0: can't read capabilities [ 368.533462][ T3580] usb 8-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 368.586211][ T3580] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.602782][ T125] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 368.611864][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.641385][ T3580] usb 8-1: Product: syz [ 368.645713][ T125] usb 4-1: Product: syz [ 368.645734][ T125] usb 4-1: Manufacturer: syz [ 368.645748][ T125] usb 4-1: SerialNumber: syz [ 368.669427][ T125] usb 4-1: config 0 descriptor?? [ 368.697629][ T3580] usb 8-1: Manufacturer: syz [ 368.716990][ T125] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 368.726878][ T3580] usb 8-1: SerialNumber: syz [ 368.797310][ T3580] usb 8-1: config 0 descriptor?? [ 368.858157][ T3580] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 368.922629][ T125] gp8psk: usb in 128 operation failed. [ 368.962775][ T125] gp8psk: usb in 137 operation failed. [ 368.968286][ T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.012965][ T125] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 369.032573][ T125] usb 4-1: media controller created [ 369.069571][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.131365][ T125] gp8psk_fe: Frontend revision 1 attached [ 369.152705][T10152] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 369.159929][ T125] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 369.177359][ T125] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 369.204352][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 369.516749][ T3580] gspca_vc032x: reg_r err -32 [ 369.521708][ T3580] vc032x: probe of 8-1:0.0 failed with error -32 [ 369.562898][ T125] gp8psk: usb in 138 operation failed. [ 369.575107][ T125] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 369.589497][ T125] gp8psk: found Genpix USB device pID = 201 (hex) [ 369.622145][ T125] usb 4-1: USB disconnect, device number 42 [ 369.720457][ T125] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 369.829151][T10174] loop6: detected capacity change from 0 to 8192 [ 369.853299][T10174] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 370.064192][T10182] loop6: detected capacity change from 0 to 164 [ 370.409777][ T26] usb 5-1: USB disconnect, device number 42 [ 370.450672][T10192] loop0: detected capacity change from 0 to 2048 [ 370.609360][T10192] loop0: p1 < > p4 [ 370.619925][T10192] loop0: p4 size 8388608 extends beyond EOD, truncated [ 370.731453][ T26] usb 8-1: USB disconnect, device number 2 [ 370.763180][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1853'. [ 370.968106][ T3621] loop0: p1 < > p4 [ 371.008797][ T3621] loop0: p4 size 8388608 extends beyond EOD, truncated [ 371.096868][T10210] loop3: detected capacity change from 0 to 512 [ 371.147977][T10210] EXT4-fs: Ignoring removed bh option [ 371.199281][T10210] EXT4-fs (loop3): orphan cleanup on readonly fs [ 371.226890][T10210] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 371.241970][T10210] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1858: invalid indirect mapped block 8 (level 2) [ 371.261973][T10210] EXT4-fs (loop3): Remounting filesystem read-only [ 371.270859][T10210] EXT4-fs (loop3): 1 truncate cleaned up [ 371.282678][ T125] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 371.286247][T10210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 371.399218][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 371.492632][ T125] usb 8-1: device descriptor read/64, error -71 [ 371.535975][ T5283] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 371.573156][ T4238] udevd[4238]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 371.580317][ T5283] udevd[5283]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 371.762581][ T125] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 371.952577][ T125] usb 8-1: device descriptor read/64, error -71 [ 372.086817][ T125] usb usb8-port1: attempt power cycle [ 372.330134][T10227] loop4: detected capacity change from 0 to 1024 [ 372.370764][T10227] EXT4-fs: Ignoring removed orlov option [ 372.384849][T10227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.407407][T10227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.469868][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 372.502610][ T125] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 372.596869][ T4340] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 372.613398][ T125] usb 8-1: device descriptor read/8, error -71 [ 372.882899][ T125] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 372.967647][ T4340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.982818][ T125] usb 8-1: device descriptor read/8, error -71 [ 372.994385][ T4340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.012606][ T4340] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 373.031872][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.060399][ T4340] usb 1-1: config 0 descriptor?? [ 373.104982][ T125] usb usb8-port1: unable to enumerate USB device [ 373.199913][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'. [ 373.912725][ T4340] usbhid 1-1:0.0: can't add hid device: -71 [ 373.929172][ T4340] usbhid: probe of 1-1:0.0 failed with error -71 [ 373.942980][ T4340] usb 1-1: USB disconnect, device number 40 [ 374.013052][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1874'. [ 374.150051][ T27] audit: type=1326 audit(1730395416.434:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.159796][T10284] binder: BINDER_SET_CONTEXT_MGR already set [ 374.226398][T10284] binder: 10282:10284 ioctl 4018620d 20000040 returned -16 [ 374.234716][ T27] audit: type=1326 audit(1730395416.464:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.258063][ T27] audit: type=1326 audit(1730395416.474:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.390660][ T27] audit: type=1326 audit(1730395416.474:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.521845][ T27] audit: type=1326 audit(1730395416.474:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.823690][ T27] audit: type=1326 audit(1730395416.474:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.876043][ T27] audit: type=1326 audit(1730395416.474:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.900765][ T27] audit: type=1326 audit(1730395416.474:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 374.961424][ T27] audit: type=1326 audit(1730395416.474:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 375.018764][ T27] audit: type=1326 audit(1730395416.474:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.6.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 375.047690][T10300] loop0: detected capacity change from 0 to 1024 [ 375.137600][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 375.147139][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 375.783289][ T4340] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 375.972939][ T4340] usb 8-1: device descriptor read/64, error -71 [ 376.252681][ T4340] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 376.365834][T10343] netlink: 'syz.4.1894': attribute type 2 has an invalid length. [ 376.382599][T10343] netlink: 'syz.4.1894': attribute type 2 has an invalid length. [ 376.404375][T10343] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 376.452748][ T4340] usb 8-1: device descriptor read/64, error -71 [ 376.576230][ T4340] usb usb8-port1: attempt power cycle [ 376.994655][ T4340] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 377.095989][ T4340] usb 8-1: device descriptor read/8, error -71 [ 377.313529][T10384] mmap: syz.4.1903 (10384) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 377.373727][ T4340] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 377.462821][ T4340] usb 8-1: device descriptor read/8, error -71 [ 377.582888][ T4340] usb usb8-port1: unable to enumerate USB device [ 378.265001][T10426] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1916'. [ 378.377429][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.383846][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.813913][ T4235] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 379.174989][ T4235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.201951][ T4235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.217918][ T4235] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 379.241348][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.266260][ T4235] usb 7-1: config 0 descriptor?? [ 379.391448][T10491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.407004][T10491] bond0: (slave dummy0): Releasing backup interface [ 379.486846][T10491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.510221][T10491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.520340][T10491] device bridge_slave_0 left promiscuous mode [ 379.533189][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.549482][T10491] device bridge_slave_1 left promiscuous mode [ 379.556031][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.569354][T10491] bond0: (slave bond_slave_0): Releasing backup interface [ 379.609766][T10491] bond0: (slave bond_slave_1): Releasing backup interface [ 379.697393][T10491] team0: Port device team_slave_0 removed [ 379.721503][T10491] team0: Port device team_slave_1 removed [ 379.728349][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.736707][T10491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.745787][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.753904][T10491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.072874][ T4235] usbhid 7-1:0.0: can't add hid device: -71 [ 380.078926][ T4235] usbhid: probe of 7-1:0.0 failed with error -71 [ 380.109845][ T4235] usb 7-1: USB disconnect, device number 30 [ 380.303114][ T3580] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 380.572598][ T3580] usb 4-1: Using ep0 maxpacket: 16 [ 380.703281][ T3580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.731388][ T3580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.759726][ T3580] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 380.791383][ T3580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.824045][ T3580] usb 4-1: config 0 descriptor?? [ 381.038169][T10563] loop6: detected capacity change from 0 to 512 [ 381.068073][T10563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.152133][T10563] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 381.174735][T10563] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.295966][ T3580] hid-generic 0003:0458:500F.0009: unknown main item tag 0x0 [ 381.325193][ T3580] hid-generic 0003:0458:500F.0009: unknown main item tag 0x0 [ 381.338945][T10576] loop0: detected capacity change from 0 to 164 [ 381.344024][ T3580] hid-generic 0003:0458:500F.0009: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 381.430612][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 381.444773][T10576] Unable to read rock-ridge attributes [ 381.462120][T10576] Unable to read rock-ridge attributes [ 381.518549][ T22] usb 4-1: USB disconnect, device number 43 [ 381.621634][T10587] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 381.646518][T10586] IPVS: stopping master sync thread 10587 ... [ 381.828772][T10593] loop7: detected capacity change from 0 to 512 [ 381.910739][T10593] __quota_error: 61 callbacks suppressed [ 381.910757][T10593] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (5435824128 > 6144). [ 381.930403][T10593] EXT4-fs warning (device loop7): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 381.947431][T10593] EXT4-fs (loop7): mount failed [ 382.056931][T10606] ptrace attach of "./syz-executor exec"[10608] was attempted by "./syz-executor exec"[10606] [ 382.130468][ T27] audit: type=1326 audit(1730395424.414:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.178496][ T27] audit: type=1326 audit(1730395424.454:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.255829][ T27] audit: type=1326 audit(1730395424.454:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.283884][ T27] audit: type=1326 audit(1730395424.454:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.283921][ T27] audit: type=1326 audit(1730395424.454:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.283949][ T27] audit: type=1326 audit(1730395424.454:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.283981][ T27] audit: type=1326 audit(1730395424.464:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.284010][ T27] audit: type=1326 audit(1730395424.464:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4e77e719 code=0x7ffc0000 [ 382.625089][T10617] lo speed is unknown, defaulting to 1000 [ 382.666146][T10622] loop7: detected capacity change from 0 to 512 [ 382.711263][T10622] EXT4-fs: Ignoring removed orlov option [ 382.718438][T10622] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.731053][T10622] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 382.841602][T10622] EXT4-fs (loop7): 1 orphan inode deleted [ 382.867566][T10622] EXT4-fs (loop7): 1 truncate cleaned up [ 382.874395][T10622] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 383.417695][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 383.514140][T10661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1989'. [ 383.860924][T10673] loop0: detected capacity change from 0 to 1024 [ 383.872375][T10673] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 383.885033][T10673] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 383.890053][T10676] loop3: detected capacity change from 0 to 128 [ 383.899038][T10673] EXT4-fs error (device loop0): ext4_get_journal_inode:5734: inode #5: comm syz.0.1995: unexpected bad inode w/o EXT4_IGET_BAD [ 383.921630][T10676] EXT4-fs: Ignoring removed bh option [ 383.927640][T10671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1993'. [ 383.930809][T10673] EXT4-fs (loop0): no journal found [ 383.946947][T10673] EXT4-fs (loop0): can't get journal size [ 383.947124][T10675] netlink: 'syz.4.1993': attribute type 10 has an invalid length. [ 383.974973][T10676] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 383.987802][T10673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 384.091346][T10676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.167259][T10676] ext2 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 384.257121][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 384.370030][T10680] loop6: detected capacity change from 0 to 4096 [ 384.415788][T10680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 384.597971][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 384.904812][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 385.086614][T10712] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2007'. [ 385.097451][T10712] netlink: 'syz.6.2007': attribute type 10 has an invalid length. [ 385.121672][T10712] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.235951][ T27] audit: type=1326 audit(1730395427.524:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10713 comm="syz.6.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 385.253356][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2008'. [ 385.932356][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2017'. [ 386.126408][T10748] loop3: detected capacity change from 0 to 1024 [ 386.190189][T10748] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2021: Invalid block bitmap block 0 in block_group 0 [ 386.275086][T10748] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.2021: Failed to acquire dquot type 0 [ 386.334330][T10748] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.2021: Freeing blocks not in datazone - block = 0, count = 4096 [ 386.442715][T10748] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2021: Invalid inode bitmap blk 0 in block_group 0 [ 386.447086][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 0 [ 386.476740][T10748] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 386.489015][T10748] EXT4-fs (loop3): 1 orphan inode deleted [ 386.497024][T10748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.676695][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 386.703809][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 0 [ 386.842183][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2032'. [ 386.975616][T10789] IPv6: Can't replace route, no match found [ 386.988034][T10788] loop7: detected capacity change from 0 to 512 [ 386.997705][T10788] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 387.019286][T10788] EXT4-fs (loop7): 1 truncate cleaned up [ 387.025132][T10788] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 387.043797][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 387.085663][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 387.111695][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2037'. [ 387.202634][ T3580] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 387.260424][ T7] usb 5-1: device descriptor read/64, error -71 [ 387.328592][T10803] syz.6.2041[10803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.328688][T10803] syz.6.2041[10803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.363175][T10803] device bond1 entered promiscuous mode [ 387.380696][T10803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.412652][ T3580] usb 1-1: device descriptor read/64, error -71 [ 387.547873][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 387.640956][T10803] bond1 (unregistering): Released all slaves [ 387.658408][T10779] 9pnet_fd: p9_fd_create_tcp (10779): problem connecting socket to 127.0.0.1 [ 387.692800][ T3580] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 387.743744][ T7] usb 5-1: device descriptor read/64, error -71 [ 387.751912][T10817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2045'. [ 387.872834][ T7] usb usb5-port1: attempt power cycle [ 387.902715][ T3580] usb 1-1: device descriptor read/64, error -71 [ 388.022697][ T3580] usb usb1-port1: attempt power cycle [ 388.098811][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 388.229945][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 388.229961][ T27] audit: type=1326 audit(1730395430.484:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.7.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bed57e719 code=0x7ffc0000 [ 388.259968][T10843] x_tables: unsorted entry at hook 2 [ 388.263727][ T27] audit: type=1326 audit(1730395430.514:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.7.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bed57e719 code=0x7ffc0000 [ 388.290360][ T7] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 388.303999][ T27] audit: type=1326 audit(1730395430.514:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.7.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f9bed57e719 code=0x7ffc0000 [ 388.383577][ T27] audit: type=1326 audit(1730395430.514:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.7.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bed57e719 code=0x7ffc0000 [ 388.385409][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2058'. [ 388.407285][ T27] audit: type=1326 audit(1730395430.514:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10839 comm="syz.7.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bed57e719 code=0x7ffc0000 [ 388.425355][ T7] usb 5-1: device descriptor read/8, error -71 [ 388.452760][ T3580] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 388.565785][ T3580] usb 1-1: device descriptor read/8, error -71 [ 388.572023][ T27] audit: type=1326 audit(1730395430.854:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.6.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 388.637848][ T27] audit: type=1326 audit(1730395430.854:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.6.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 388.662173][ T27] audit: type=1326 audit(1730395430.854:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.6.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 388.722869][ T7] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 388.736167][ T27] audit: type=1326 audit(1730395430.854:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.6.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 388.760432][ T27] audit: type=1326 audit(1730395430.854:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10853 comm="syz.6.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 388.813130][ T7] usb 5-1: device descriptor read/8, error -71 [ 388.862919][ T3580] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 388.934433][ T7] usb usb5-port1: unable to enumerate USB device [ 388.973899][ T3580] usb 1-1: device descriptor read/8, error -71 [ 389.103738][ T3580] usb usb1-port1: unable to enumerate USB device [ 389.112445][T10876] loop7: detected capacity change from 0 to 1024 [ 389.138511][T10876] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 389.164168][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'. [ 389.170566][T10876] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 389.193658][T10876] EXT4-fs error (device loop7): ext4_get_journal_inode:5734: inode #5: comm syz.7.2072: unexpected bad inode w/o EXT4_IGET_BAD [ 389.208822][T10876] EXT4-fs (loop7): no journal found [ 389.215070][T10876] EXT4-fs (loop7): can't get journal size [ 389.224744][T10876] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 389.278736][ T9596] EXT4-fs (loop7): unmounting filesystem. [ 389.452809][ T4292] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 389.652684][ T125] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 389.751293][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2085'. [ 389.843248][ T4292] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 389.844693][ T125] usb 7-1: device descriptor read/64, error -71 [ 389.853139][T10907] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2086'. [ 389.870044][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.893210][ T4292] usb 4-1: config 0 descriptor?? [ 389.898653][T10909] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 390.125702][ T125] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 390.322697][ T125] usb 7-1: device descriptor read/64, error -71 [ 390.374760][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 390.444699][ T125] usb usb7-port1: attempt power cycle [ 390.508154][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2099'. [ 390.518495][T10934] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 390.842651][T10237] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 390.852546][ T125] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 390.942808][ T125] usb 7-1: device descriptor read/8, error -71 [ 391.042797][T10237] usb 1-1: device descriptor read/64, error -71 [ 391.045608][T10942] loop4: detected capacity change from 0 to 2048 [ 391.111093][T10942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 391.157359][T10942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2103: bg 0: block 234: padding at end of block bitmap is not set [ 391.192058][T10942] EXT4-fs (loop4): Remounting filesystem read-only [ 391.212634][ T125] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 391.218635][T10942] syz.4.2103 (10942) used greatest stack depth: 19040 bytes left [ 391.231572][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 391.308259][ T125] usb 7-1: device descriptor read/8, error -71 [ 391.332774][T10237] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 391.417351][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 391.442800][ T125] usb usb7-port1: unable to enumerate USB device [ 391.526406][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2110'. [ 391.532860][T10237] usb 1-1: device descriptor read/64, error -71 [ 391.538199][T10961] netlink: 'syz.7.2110': attribute type 10 has an invalid length. [ 391.592329][T10961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 391.664045][T10237] usb usb1-port1: attempt power cycle [ 391.909283][T10972] device wireguard0 entered promiscuous mode [ 392.072571][T10237] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 392.162701][T10237] usb 1-1: device descriptor read/8, error -71 [ 392.228732][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2119'. [ 392.306054][ T4292] pegasus 4-1:0.0: setup Pegasus II specific registers [ 392.442732][T10237] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 392.485890][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2121'. [ 392.552906][T10237] usb 1-1: device descriptor read/8, error -71 [ 392.677525][T10237] usb usb1-port1: unable to enumerate USB device [ 392.900009][T11003] syz.4.2128[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.900106][T11003] syz.4.2128[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.917820][T11003] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2128'. [ 393.512729][ T4292] pegasus 4-1:0.0: can't locate MII phy, using default [ 393.546913][ T4292] pegasus 4-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, a2:b0:e1:73:ab:a8 [ 393.669739][ T4292] usb 4-1: USB disconnect, device number 44 [ 393.798343][T11032] loop6: detected capacity change from 0 to 512 [ 393.839154][T11032] EXT4-fs: Ignoring removed orlov option [ 393.856823][T11032] EXT4-fs: Ignoring removed oldalloc option [ 393.935959][T11032] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.2139: Parent and EA inode have the same ino 15 [ 394.033838][T11032] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.2139: Parent and EA inode have the same ino 15 [ 394.080495][T11032] EXT4-fs (loop6): 1 orphan inode deleted [ 394.096676][T11032] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.272131][ T6069] EXT4-fs (loop6): unmounting filesystem. [ 394.403321][T11059] __nla_validate_parse: 7 callbacks suppressed [ 394.403337][T11059] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2147'. [ 394.645523][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 394.793655][T11072] loop0: detected capacity change from 0 to 2048 [ 394.868351][T11072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 394.911185][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 394.911199][ T27] audit: type=1326 audit(1730395437.194:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 394.922566][ T125] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 395.010779][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 395.055543][ T27] audit: type=1326 audit(1730395437.204:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.106563][ T27] audit: type=1326 audit(1730395437.204:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.131608][ T7] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 395.139727][ T27] audit: type=1326 audit(1730395437.204:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.168030][ T27] audit: type=1326 audit(1730395437.204:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.197014][ T27] audit: type=1326 audit(1730395437.204:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.232764][ T27] audit: type=1326 audit(1730395437.204:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.316814][ T27] audit: type=1326 audit(1730395437.204:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.356982][ T125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.391603][ T125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 395.413842][ T125] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.431924][ T27] audit: type=1326 audit(1730395437.204:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.469318][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2160'. [ 395.485596][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2160'. [ 395.495457][ T27] audit: type=1326 audit(1730395437.204:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cb737e719 code=0x7ffc0000 [ 395.537373][T11092] device bond1 entered promiscuous mode [ 395.543967][T11092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.572936][ T7] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 395.590209][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.623709][ T7] usb 4-1: config 0 descriptor?? [ 395.632886][ T125] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.642083][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.658979][ T125] usb 5-1: Product: syz [ 395.665074][ T125] usb 5-1: Manufacturer: syz [ 395.670788][ T125] usb 5-1: SerialNumber: syz [ 395.723420][ T125] hub 5-1:1.0: bad descriptor, ignoring hub [ 395.731337][ T125] hub: probe of 5-1:1.0 failed with error -5 [ 395.756399][ T125] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 395.776069][ T125] cdc_ncm 5-1:1.0: bind() failure [ 395.960063][T11104] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2162'. [ 396.134394][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2165'. [ 396.200703][T11113] loop7: detected capacity change from 0 to 1024 [ 396.253471][T11113] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 396.275570][T11113] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 396.296475][T11113] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 396.311969][T11113] EXT4-fs (loop7): This should not happen!! Data will be lost [ 396.311969][T11113] [ 396.324780][T11113] EXT4-fs (loop7): Total free blocks count 0 [ 396.330802][T11113] EXT4-fs (loop7): Free/Dirty block details [ 396.338302][T11113] EXT4-fs (loop7): free_blocks=68451041280 [ 396.346384][T11113] EXT4-fs (loop7): dirty_blocks=32 [ 396.351711][T11113] EXT4-fs (loop7): Block reservation details [ 396.357845][T11113] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 396.366709][T11123] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 396.704622][T11139] loop7: detected capacity change from 0 to 2048 [ 396.739327][T11139] Alternate GPT is invalid, using primary GPT. [ 396.746243][T11139] loop7: p1 p2 p3 [ 396.932744][ T125] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 397.024155][T11149] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2175'. [ 397.035311][T11149] netlink: 'syz.6.2175': attribute type 10 has an invalid length. [ 397.055547][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2174'. [ 397.130070][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2176'. [ 397.302791][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.339937][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.357753][ T125] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 397.372975][T11159] [ 397.375737][T11159] ============================= [ 397.380662][T11159] WARNING: suspicious RCU usage [ 397.385601][T11159] 6.1.114-syzkaller #0 Not tainted [ 397.390727][T11159] ----------------------------- [ 397.395670][T11159] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 397.404225][T11159] [ 397.404225][T11159] other info that might help us debug this: [ 397.404225][T11159] [ 397.414577][T11159] [ 397.414577][T11159] rcu_scheduler_active = 2, debug_locks = 1 [ 397.422715][T11159] 1 lock held by syz.6.2179/11159: [ 397.427833][T11159] #0: ffffffff8d32b8c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 397.438059][T11159] [ 397.438059][T11159] stack backtrace: [ 397.443958][T11159] CPU: 0 PID: 11159 Comm: syz.6.2179 Not tainted 6.1.114-syzkaller #0 [ 397.452124][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.462162][T11159] Call Trace: [ 397.465429][T11159] [ 397.468346][T11159] dump_stack_lvl+0x1e3/0x2cb [ 397.473012][T11159] ? nf_tcp_handle_invalid+0x642/0x642 [ 397.478469][T11159] ? panic+0x764/0x764 [ 397.482534][T11159] lockdep_rcu_suspicious+0x21c/0x330 [ 397.487916][T11159] get_callchain_entry+0x2ac/0x3c0 [ 397.493013][T11159] get_perf_callchain+0xe6/0x810 [ 397.497942][T11159] ? put_callchain_entry+0xb0/0xb0 [ 397.503034][T11159] ? __lock_acquire+0x125b/0x1f80 [ 397.508052][T11159] __bpf_get_stack+0x378/0x570 [ 397.512805][T11159] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 397.518942][T11159] ? __cant_sleep+0x270/0x270 [ 397.523606][T11159] bpf_get_stack_raw_tp+0x1b2/0x220 [ 397.528805][T11159] bpf_prog_d43750871481577d+0x3d/0x41 [ 397.534271][T11159] bpf_prog_run_pin_on_cpu+0x62/0x130 [ 397.539647][T11159] bpf_prog_test_run_syscall+0x312/0x4d0 [ 397.545273][T11159] ? sock_gen_cookie+0x60/0x60 [ 397.550027][T11159] ? sock_gen_cookie+0x60/0x60 [ 397.554805][T11159] bpf_prog_test_run+0x32f/0x3a0 [ 397.559737][T11159] __sys_bpf+0x3eb/0x6c0 [ 397.563968][T11159] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 397.569351][T11159] ? print_irqtrace_events+0x210/0x210 [ 397.574808][T11159] ? print_irqtrace_events+0x210/0x210 [ 397.580279][T11159] ? syscall_enter_from_user_mode+0x2e/0x230 [ 397.586258][T11159] ? lockdep_hardirqs_on+0x94/0x130 [ 397.591466][T11159] __x64_sys_bpf+0x78/0x90 [ 397.595876][T11159] do_syscall_64+0x3b/0xb0 [ 397.600297][T11159] ? clear_bhb_loop+0x45/0xa0 [ 397.604957][T11159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.610835][T11159] RIP: 0033:0x7f3cb737e719 [ 397.615235][T11159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.634924][T11159] RSP: 002b:00007f3cb8126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.643321][T11159] RAX: ffffffffffffffda RBX: 00007f3cb7535f80 RCX: 00007f3cb737e719 [ 397.651277][T11159] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 397.659254][T11159] RBP: 00007f3cb73f132e R08: 0000000000000000 R09: 0000000000000000 [ 397.667209][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.675164][T11159] R13: 0000000000000000 R14: 00007f3cb7535f80 R15: 00007fff0a73aa78 [ 397.683129][T11159] [ 397.689627][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.712439][ T125] usb 1-1: config 0 descriptor?? [ 397.842767][ T4293] usb 5-1: USB disconnect, device number 47 [ 398.193764][ T125] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 398.206784][ T125] cp2112 0003:10C4:EA90.000A: parse failed [ 398.214001][ T125] cp2112: probe of 0003:10C4:EA90.000A failed with error -22 [ 398.362806][ T7] pegasus 4-1:0.0: setup Pegasus II specific registers [ 399.582754][ T7] pegasus 4-1:0.0: can't locate MII phy, using default [ 399.620465][ T7] pegasus 4-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 96:28:af:0a:99:47 [ 399.648026][ T7] usb 4-1: USB disconnect, device number 45 [ 399.686539][ T4235] usb 1-1: USB disconnect, device number 49