last executing test programs: 18.041328267s ago: executing program 4 (id=1065): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40c142, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 17.147979952s ago: executing program 1 (id=1067): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r3, 0x100, 0x8, &(0x7f0000000e00)="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", 0xe00) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xffffff80, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) write$input_event(r5, &(0x7f0000000040)={{0x0, 0xea60}, 0x2, 0x8000, 0x22}, 0x18) 16.974946486s ago: executing program 2 (id=1069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$mouse(0x0, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x6000, 0xd000, 0x1}}, "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", "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"}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5319, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x36315247, 0x8, 0xd, [{0x40000000}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7, 0x0, 0x3}}) 15.268992643s ago: executing program 1 (id=1071): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000036f75e0000000000ffdbdf2504000080"], 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) ptrace(0x8, 0x0) ptrace(0x4207, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) 14.980451227s ago: executing program 3 (id=1072): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f0000000100)='./file1\x00', 0x165) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) openat(0xffffffffffffff9c, 0x0, 0x107b42, 0x32) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) 14.711575572s ago: executing program 1 (id=1073): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) r1 = syz_open_dev$dri(0x0, 0x1, 0x101000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 14.454356057s ago: executing program 4 (id=1074): r0 = socket$inet(0x2, 0x3, 0x80000000) get_mempolicy(0x0, &(0x7f0000000140), 0x3, &(0x7f0000ffc000/0x3000)=nil, 0x6) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) tee(r2, r1, 0xffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000140)={0x100, 0x20000004, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffc, 0x103, 0x4, "abd206a1ebd7ce00"}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2263, 0x41) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440eb45b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000cfb986a84ad844870e63a4c8dbc3ca38b44fff1fea1b574745d5c663298bed6dbe85d4aa10fab922fa6ffe4740f7e3cf43ebf4593eb5cf3be1bd640f1eab71689dd79b9f4b30c3cbd425b7c7a69b12d5e2bfe59c3c37cff5a8580b0297157f144c7a0f3689ed6026b23fc095c75a7a0fff7f460e925486f2507b98ad3a76c1098b373f1c0894d8e4f95ad005269be108a7fb8a8831939cb2693a67468016d2a7ddca235d2b9d5b6c9bb9a00eeb904246aee3c7186609bbbe39aaf80931302229a795dd984e9ca85900"/398, 0x18e, 0x52, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500002ea661e1e4a03533353d69ab7e91be8111d822fb2452ca435f6911dbe3dcb6b601d935ba17806cac613fef177e179164262a235bd96de972d99073549c41c72edbf5c4e63f8105299b18741d0b512ab8bd4ffe5c3505000000000000008e5e11acbef2880ae99f8e8a3432539d774061b1f5c0b7d3f8796d2d0a620b2ebae926a004"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='task\x00') io_setup(0x1, &(0x7f00000004c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x7fffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]}) 13.178034586s ago: executing program 3 (id=1076): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 12.900061707s ago: executing program 2 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x5, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 12.790611666s ago: executing program 4 (id=1079): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x9876f2e2a394785c}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x63c, 0x404, 0x1ac, 0x2c4, 0xcc, 0xcc, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x405}}}, {{@ipv6={@mcast1, @local, [0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x4, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x8}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x5, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0xa, 0x1ff, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000080)='g', 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x5, 0x0, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x17) 11.598047166s ago: executing program 3 (id=1080): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) listen(r2, 0xffffffff) accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11.58769377s ago: executing program 1 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) 10.669409807s ago: executing program 0 (id=1083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 9.936253316s ago: executing program 1 (id=1084): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40c142, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 9.91893158s ago: executing program 2 (id=1085): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) openat$dsp(0xffffff9c, 0x0, 0x82040, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) syz_emit_ethernet(0x62, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, '\a\x00'}, @window={0x3, 0x3, 0x81}, @md5sig={0x13, 0x12, "f5c0f39d4786d7de941aad9f438da5f2"}]}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00'}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00r'], 0x0}, 0x0) 9.734003266s ago: executing program 3 (id=1086): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x6, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0xfffffffffff, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="00fbfddc0bd5e8dee8d286b20b62086ce9b81b1660031b9dcba026117a79eba4a32d50e5c7b14c8e3f4d"], 0x1, 0x404, &(0x7f00000007c0)="$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") 8.738112646s ago: executing program 0 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x32, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 8.494429671s ago: executing program 3 (id=1088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$mouse(0x0, 0x3, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5319, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x36315247, 0x8, 0xd, [{0x40000000}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7, 0x0, 0x3}}) 7.333469108s ago: executing program 0 (id=1089): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000000)={0x9000, 0xd000}) close_range(r0, 0xffffffffffffffff, 0x0) 6.544743443s ago: executing program 4 (id=1090): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 5.471565358s ago: executing program 4 (id=1091): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10) r1 = syz_open_dev$dri(0x0, 0x1, 0x101000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 5.468405704s ago: executing program 2 (id=1092): r0 = socket$inet6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x2, {{0xa, 0x4e20, 0x0, @mcast2, 0xde9a}}, {{0xa, 0x4e22, 0x200, @mcast2, 0x80000000}}}, 0x108) 3.762437745s ago: executing program 2 (id=1093): getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3.667329619s ago: executing program 0 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="b02dd316f328d6998f6e024018c65a62cd964ac0af6965d3470146cab7ca798466d6040056e47cf03d34c80b32d5e1fc4b03a47580adf0020510758b820b1030eab1dff5af4263338d3876ad85499867190adbcf20147916c9d5ced020c1ecf9f37ae50358452d161bdfcce27cba0700f16eff2bb8f70f4c6779494889", @ANYRES32, @ANYBLOB="5c1b3683036447d9723f9cea24a738663d20fb0c8b3c0da92963fc0d35433c84ad2764922abe4dc086b03d7d492578639418349ea21a", @ANYRESDEC=r0, @ANYBLOB="a791ae3fb18efefbe585075fe0b3affc7147938b7eb75782bac58750c11586efe837814130fd5fe679b31ea350cc755b97ca257f5074c6f917c0b82ea75a8ae9ed761926bc6188193444042a41ddd048", @ANYRES64, @ANYBLOB="f4a43ac2fbfbc4ee1f3a1e10a7a47936b1f55e2ead2bf0aeb3b00e2b762688b34c0092b0d50fb3926e2b00928a5869f52c09d6f171b29ad127013ae674c2a4b6f776c4853d730758c9c1b61bb1", @ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 3.40529909s ago: executing program 3 (id=1095): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_open_dev$usbmon(0x0, 0xc260, 0x20000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 735.683821ms ago: executing program 2 (id=1096): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket(0x22, 0x80008, 0x14ec1cb5) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x6, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 647.696144ms ago: executing program 0 (id=1097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 245.01502ms ago: executing program 4 (id=1098): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_pidfd_open(0x0, 0x0) sendfile(r2, r2, 0x0, 0x200020) 113.993029ms ago: executing program 1 (id=1099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) close_range(r3, r4, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x6000, 0xd000, 0x1}}, "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", "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"}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x36315247, 0x8, 0xd, [{0x40000000}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7, 0x0, 0x3}}) 0s ago: executing program 0 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x63c, 0x404, 0x1ac, 0x2c4, 0xcc, 0xcc, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x405}}}, {{@ipv6={@mcast1, @local, [0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x4, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x8}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x100, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x5, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0xa, 0x1ff, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000080)='g', 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x5, 0x0, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x17) kernel console output (not intermixed with test programs): 407482][ T5911] usb 4-1: SerialNumber: syz [ 160.624080][ T5912] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.756029][ T5912] usb 1-1: device descriptor read/64, error -71 [ 160.776398][ T5911] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 160.790003][ T5911] usb 4-1: USB disconnect, device number 5 [ 160.888936][ T5912] usb usb1-port1: attempt power cycle [ 161.284107][ T5912] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 161.325215][ T5912] usb 1-1: device descriptor read/8, error -71 [ 161.634514][ T5912] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 161.647481][ T7000] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 161.682394][ T5912] usb 1-1: device descriptor read/8, error -71 [ 161.804328][ T5912] usb usb1-port1: unable to enumerate USB device [ 163.994434][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.285281][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 164.467875][ T5885] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 164.480903][ T5885] usb 3-1: config 8 has no interface number 0 [ 164.504836][ T5885] usb 3-1: config 8 interface 35 has no altsetting 0 [ 164.555239][ T5885] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 164.587577][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.598367][ T5885] usb 3-1: Product: syz [ 164.606097][ T5885] usb 3-1: Manufacturer: syz [ 164.610798][ T5885] usb 3-1: SerialNumber: syz [ 164.990144][ T5885] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 165.033450][ T5885] usb 3-1: USB disconnect, device number 10 [ 165.515481][ T7058] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 165.884147][ T123] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 165.978804][ T7074] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.326'. [ 166.036323][ T123] usb 1-1: device descriptor read/64, error -71 [ 166.284120][ T123] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.415208][ T123] usb 1-1: device descriptor read/64, error -71 [ 166.576124][ T123] usb usb1-port1: attempt power cycle [ 166.944106][ T123] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.974706][ T123] usb 1-1: device descriptor read/8, error -71 [ 167.214109][ T123] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 167.263729][ T123] usb 1-1: device descriptor read/8, error -71 [ 167.394408][ T123] usb usb1-port1: unable to enumerate USB device [ 169.093999][ T5939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 169.266328][ T5939] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 169.282472][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.314137][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.330060][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 169.350632][ T5939] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 169.363787][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.383659][ T5939] usb 1-1: config 0 descriptor?? [ 169.496668][ T7109] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 169.714417][ T7116] batadv_slave_0: entered promiscuous mode [ 169.839492][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.875556][ T5911] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.893711][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.923191][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 169.975327][ T5939] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x7 [ 169.989934][ T5939] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 170.006478][ T5939] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 170.016791][ T5939] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 170.029849][ T5939] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 170.054096][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 170.061726][ T5911] usb 5-1: config 8 has an invalid interface number: 35 but max is 0 [ 170.072599][ T5911] usb 5-1: config 8 has no interface number 0 [ 170.080177][ T5911] usb 5-1: config 8 interface 35 has no altsetting 0 [ 170.094280][ T5911] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 170.103399][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.112839][ T5939] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 170.165899][ T5911] usb 5-1: Product: syz [ 170.179230][ T5939] usb 1-1: USB disconnect, device number 19 [ 170.186541][ T5911] usb 5-1: Manufacturer: syz [ 170.195806][ T5911] usb 5-1: SerialNumber: syz [ 170.433091][ T7116] batadv_slave_0: left promiscuous mode [ 170.656326][ T5911] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 170.697479][ T5911] usb 5-1: USB disconnect, device number 7 [ 170.703788][ T7125] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 171.186428][ T7135] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 171.439106][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.617394][ T5912] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.625635][ T5912] usb 4-1: config 0 has no interface number 0 [ 171.638537][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.663666][ T5912] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.692700][ T5912] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.727334][ T5912] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 171.769663][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.787421][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.822348][ T5912] usb 4-1: config 0 descriptor?? [ 171.956019][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 171.964395][ T9] usb 5-1: config 0 has no interfaces? [ 172.158430][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 172.183294][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.220264][ T9] usb 5-1: Product: syz [ 172.231443][ T9] usb 5-1: Manufacturer: syz [ 172.247404][ T9] usb 5-1: SerialNumber: syz [ 172.303710][ T9] usb 5-1: config 0 descriptor?? [ 172.675658][ T7145] syzkaller0: entered promiscuous mode [ 172.681348][ T7145] syzkaller0: entered allmulticast mode [ 172.696253][ T7145] tipc: Enabled bearer , priority 0 [ 172.709881][ T7144] tipc: Resetting bearer [ 172.729396][ T7144] tipc: Disabling bearer [ 173.015879][ T7150] syzkaller0: entered promiscuous mode [ 173.023025][ T7150] syzkaller0: entered allmulticast mode [ 173.049964][ T7152] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 173.375876][ T7157] syzkaller0: entered promiscuous mode [ 173.381475][ T7157] syzkaller0: entered allmulticast mode [ 173.651870][ T5912] usbhid 4-1:0.1: can't add hid device: -71 [ 173.664084][ T5912] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 173.698947][ T5912] usb 4-1: USB disconnect, device number 6 [ 173.937123][ T7173] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.353'. [ 174.500968][ T48] usb 5-1: USB disconnect, device number 8 [ 177.196254][ T48] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 177.292942][ T7212] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 177.412836][ T48] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.422595][ T48] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.435041][ T48] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.444467][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.464213][ T48] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.496754][ T48] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.514176][ T48] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.532525][ T48] usb 3-1: Product: syz [ 177.554044][ T48] usb 3-1: Manufacturer: syz [ 177.597967][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 177.603237][ T48] cdc_wdm 3-1:1.0: skipping garbage [ 177.624003][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 177.648885][ T48] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 177.682180][ T48] cdc_wdm 3-1:1.0: Unknown control protocol [ 177.694171][ T7225] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.368'. [ 177.784010][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 177.785177][ T7218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.796319][ T5885] usb 5-1: config 0 has no interfaces? [ 177.807958][ T5885] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.819783][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.835449][ T5885] usb 5-1: Product: syz [ 177.839780][ T5885] usb 5-1: Manufacturer: syz [ 177.850213][ T5885] usb 5-1: SerialNumber: syz [ 177.858215][ T7219] bond_slave_0: entered promiscuous mode [ 177.864114][ T7219] bond_slave_1: entered promiscuous mode [ 177.873166][ T5885] usb 5-1: config 0 descriptor?? [ 177.889091][ T7219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.914239][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.925349][ T7219] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.086912][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.096933][ T48] usb 4-1: config 0 has no interface number 0 [ 178.103124][ T48] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.115336][ T48] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.127593][ T48] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.140686][ T48] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 178.150377][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.164119][ T48] usb 4-1: config 0 descriptor?? [ 178.191529][ T7237] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 178.194186][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.258660][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 178.364438][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 178.372827][ T5911] usb 2-1: config 8 has an invalid interface number: 35 but max is 0 [ 178.389813][ T5911] usb 2-1: config 8 has no interface number 0 [ 178.396183][ T5911] usb 2-1: config 8 interface 35 has no altsetting 0 [ 178.418873][ T5911] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 178.430308][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.439708][ T5911] usb 2-1: Product: syz [ 178.444096][ T5911] usb 2-1: Manufacturer: syz [ 178.449861][ T5911] usb 2-1: SerialNumber: syz [ 178.767528][ T5911] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 178.795598][ T5911] usb 2-1: USB disconnect, device number 3 [ 179.971888][ T5911] usb 3-1: USB disconnect, device number 11 [ 180.915253][ T48] usbhid 4-1:0.1: can't add hid device: -71 [ 180.931329][ T48] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 180.960212][ T48] usb 4-1: USB disconnect, device number 7 [ 181.125530][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 181.125547][ T30] audit: type=1326 audit(1766165508.332:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 181.205384][ T5911] usb 5-1: USB disconnect, device number 9 [ 181.320047][ T30] audit: type=1326 audit(1766165508.332:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 181.854052][ T30] audit: type=1326 audit(1766165508.332:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2ad8df90 code=0x7ffc0000 [ 181.876661][ T30] audit: type=1326 audit(1766165508.332:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.015441][ T30] audit: type=1326 audit(1766165508.332:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.104854][ T30] audit: type=1326 audit(1766165508.332:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.173997][ T30] audit: type=1326 audit(1766165508.332:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.271987][ T30] audit: type=1326 audit(1766165508.332:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.327651][ T30] audit: type=1326 audit(1766165508.332:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.407823][ T30] audit: type=1326 audit(1766165508.332:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 182.526253][ T7290] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.536089][ T7293] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.388'. [ 182.544615][ T7290] syzkaller0: entered promiscuous mode [ 182.550846][ T7290] syzkaller0: entered allmulticast mode [ 182.843994][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 182.996303][ T5911] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 183.004674][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.016381][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.060712][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.080900][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.185486][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 183.209215][ T5911] usb 1-1: config 0 has no interfaces? [ 183.231132][ T5911] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.256433][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.272024][ T5911] usb 1-1: Product: syz [ 183.277314][ T5911] usb 1-1: Manufacturer: syz [ 183.282112][ T5911] usb 1-1: SerialNumber: syz [ 183.294600][ T5911] usb 1-1: config 0 descriptor?? [ 183.337499][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 183.416038][ T9] usbtmc 2-1:16.0: can't read capabilities [ 184.128898][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 184.507203][ T7329] syzkaller0: entered promiscuous mode [ 184.525776][ T7329] syzkaller0: entered allmulticast mode [ 185.926624][ T48] usb 1-1: USB disconnect, device number 20 [ 186.153999][ T5885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.314063][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 186.322201][ T5885] usb 4-1: config 8 has an invalid interface number: 35 but max is 0 [ 186.335099][ T5885] usb 4-1: config 8 has no interface number 0 [ 186.341895][ T5885] usb 4-1: config 8 interface 35 has no altsetting 0 [ 186.362143][ T5885] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 186.381032][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.402982][ T5885] usb 4-1: Product: syz [ 186.422033][ T5885] usb 4-1: Manufacturer: syz [ 186.432217][ T5885] usb 4-1: SerialNumber: syz [ 186.795156][ T5885] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 186.833368][ T5885] usb 4-1: USB disconnect, device number 8 [ 187.493283][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 187.493299][ T30] audit: type=1326 audit(1766165514.692:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 187.534073][ T30] audit: type=1326 audit(1766165514.692:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 187.571300][ T30] audit: type=1326 audit(1766165514.692:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 187.594938][ T30] audit: type=1326 audit(1766165514.692:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 187.627508][ T30] audit: type=1326 audit(1766165514.692:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2ad8df90 code=0x7ffc0000 [ 187.654636][ T123] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.164762][ T30] audit: type=1326 audit(1766165514.712:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 188.188405][ T30] audit: type=1326 audit(1766165514.712:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 188.212193][ T30] audit: type=1326 audit(1766165514.712:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 188.236759][ T123] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 188.263995][ T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.302633][ T30] audit: type=1326 audit(1766165514.712:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 188.325156][ T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.394582][ T123] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 188.434347][ T30] audit: type=1326 audit(1766165514.712:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 188.460940][ T123] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 188.499555][ T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.515219][ T123] usb 3-1: config 0 descriptor?? [ 188.554524][ T7295] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -110 [ 188.592162][ T5939] usb 2-1: USB disconnect, device number 4 [ 189.152903][ T123] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x7 [ 189.175473][ T123] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 189.278058][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.285466][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.293998][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.301219][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.311997][ T123] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 189.335424][ T123] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 189.361863][ T7376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.415460][ T123] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 189.492752][ T7391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.520760][ T123] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found [ 189.703713][ T123] usb 3-1: USB disconnect, device number 12 [ 189.725945][ T7403] batadv_slave_0: entered promiscuous mode [ 189.944032][ T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.145754][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 190.164589][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.190863][ T48] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.205257][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.223339][ T48] usb 2-1: Product: syz [ 190.240884][ T48] usb 2-1: Manufacturer: syz [ 190.257530][ T48] usb 2-1: SerialNumber: syz [ 190.286511][ T7403] batadv_slave_0: left promiscuous mode [ 190.301064][ T48] usb 2-1: config 0 descriptor?? [ 190.544153][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.705431][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 190.720849][ T9] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 190.729465][ T9] usb 3-1: config 8 has no interface number 0 [ 190.735718][ T9] usb 3-1: config 8 interface 35 has no altsetting 0 [ 190.752926][ T9] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 190.763750][ T123] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 190.772565][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.784265][ T9] usb 3-1: Product: syz [ 190.789688][ T9] usb 3-1: Manufacturer: syz [ 190.796200][ T9] usb 3-1: SerialNumber: syz [ 190.948212][ T123] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.959354][ T123] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.973750][ T123] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.991061][ T123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.128809][ T9] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 191.142748][ T9] usb 3-1: USB disconnect, device number 13 [ 191.236271][ T123] usb 1-1: GET_CAPABILITIES returned 0 [ 191.245660][ T123] usbtmc 1-1:16.0: can't read capabilities [ 192.711268][ T5885] usb 2-1: USB disconnect, device number 5 [ 192.781603][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 192.781621][ T30] audit: type=1326 audit(1766165519.982:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 192.812062][ T30] audit: type=1326 audit(1766165520.012:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 192.839697][ T30] audit: type=1326 audit(1766165520.022:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2ad8df90 code=0x7ffc0000 [ 192.918454][ T30] audit: type=1326 audit(1766165520.022:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 192.969763][ T30] audit: type=1326 audit(1766165520.032:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 193.064352][ T30] audit: type=1326 audit(1766165520.032:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 193.226607][ T30] audit: type=1326 audit(1766165520.032:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 193.578314][ T30] audit: type=1326 audit(1766165520.032:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 193.603604][ T30] audit: type=1326 audit(1766165520.032:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 193.654267][ T48] usb 1-1: USB disconnect, device number 21 [ 193.850244][ T30] audit: type=1326 audit(1766165520.042:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 194.164652][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194731][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.992096][ T5885] IPVS: starting estimator thread 0... [ 195.054177][ T7495] snd_dummy snd_dummy.0: control 4:2:0:syz0:211 is already present [ 195.093992][ T7493] IPVS: using max 45 ests per chain, 108000 per kthread [ 195.894253][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.066040][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 196.075422][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.100133][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.130221][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.143197][ T9] usb 2-1: Product: syz [ 196.149757][ T9] usb 2-1: Manufacturer: syz [ 196.156754][ T9] usb 2-1: SerialNumber: syz [ 196.172518][ T9] usb 2-1: config 0 descriptor?? [ 196.346345][ T5885] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 196.505658][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.527667][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.561649][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.580202][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.807261][ T5885] usb 4-1: GET_CAPABILITIES returned 0 [ 196.824696][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 197.384965][ T7537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.457'. [ 198.210300][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 199.014203][ T5939] usb 2-1: USB disconnect, device number 6 [ 199.163155][ T5911] usb 4-1: USB disconnect, device number 9 [ 199.703863][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 201.450420][ T7600] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 202.016633][ T7609] fuse: Unknown parameter 'fd0x0000000000000005' [ 202.563643][ T7626] tipc: Enabled bearer , priority 0 [ 202.595239][ T7624] tipc: Disabling bearer [ 202.680881][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 206.334534][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 206.336106][ T30] audit: type=1326 audit(1766165533.532:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 206.372266][ T30] audit: type=1326 audit(1766165533.532:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc44198df90 code=0x7ffc0000 [ 206.399423][ T30] audit: type=1326 audit(1766165533.532:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 206.473151][ T30] audit: type=1326 audit(1766165533.532:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 206.741285][ T30] audit: type=1326 audit(1766165533.532:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 206.847347][ T30] audit: type=1326 audit(1766165533.532:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 207.163981][ T30] audit: type=1326 audit(1766165533.532:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 207.254011][ T30] audit: type=1326 audit(1766165533.532:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 207.348231][ T30] audit: type=1326 audit(1766165533.532:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 207.496939][ T30] audit: type=1326 audit(1766165533.532:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc44198f749 code=0x7ffc0000 [ 208.705696][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 210.802110][ T7713] loop0: detected capacity change from 0 to 32768 [ 210.889173][ T7713] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.676845][ T7717] Bluetooth: hci0: command 0x0406 tx timeout [ 211.682990][ T7716] Bluetooth: hci1: command 0x0406 tx timeout [ 211.688005][ T7735] Bluetooth: hci3: command 0x0406 tx timeout [ 211.690557][ T7716] Bluetooth: hci2: command 0x0406 tx timeout [ 211.697720][ T7735] Bluetooth: hci4: command 0x0406 tx timeout [ 211.717886][ T7713] XFS (loop0): Ending clean mount [ 211.752688][ T7713] XFS (loop0): Quotacheck needed: Please wait. [ 211.952894][ T7713] XFS (loop0): Quotacheck: Done. [ 213.023984][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.197984][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.684808][ T7749] loop2: detected capacity change from 0 to 131072 [ 213.695496][ T7749] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 213.703693][ T7749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 213.734308][ T7749] F2FS-fs (loop2): invalid crc value [ 213.773936][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.837801][ T7749] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 213.852929][ T7749] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 213.861179][ T7749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 213.910750][ T5841] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 213.924111][ T9] usb 2-1: Product: syz [ 213.928303][ T9] usb 2-1: Manufacturer: syz [ 214.000621][ T9] usb 2-1: SerialNumber: syz [ 214.477772][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 214.522988][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 214.925477][ T7747] loop4: detected capacity change from 0 to 32768 [ 214.974447][ T5898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 215.034912][ T7747] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.043226][ T7747] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 215.147648][ T7747] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 215.187753][ T5898] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 215.211825][ T5940] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 215.219690][ T5940] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 215.220805][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.276651][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.299826][ T5940] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 80ms [ 215.319730][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 215.324649][ T5940] gfs2: fsid=syz:syz.0: jid=0: Done [ 215.363959][ T5898] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 215.373033][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.422509][ T5898] usb 1-1: config 0 descriptor?? [ 215.550208][ T7747] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 216.117808][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 216.136580][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 216.200224][ T7747] gfs2: fsid=syz:syz.0: found 1 quota changes [ 216.229916][ T7759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.280855][ T5898] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x7 [ 216.310814][ T5898] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 216.330067][ T5898] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 216.341463][ T5835] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 216.358692][ T7771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.362486][ T5898] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 216.383195][ T5835] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 216.393756][ T5835] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5835 [syz-executor] gfs2_quota_sync+0x359/0x460 [ 216.405244][ T5898] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 216.413468][ T5835] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 216.426604][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 216.426626][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.426643][ T5835] Call Trace: [ 216.426651][ T5835] [ 216.426658][ T5835] dump_stack_lvl+0x189/0x250 [ 216.426686][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.426716][ T5835] ? gfs2_withdraw+0xa8/0x1b0 [ 216.426740][ T5835] gfs2_withdraw+0xc3/0x1b0 [ 216.426758][ T5835] inode_go_instantiate+0xdd0/0x1210 [ 216.426784][ T5835] ? __pfx_inode_go_instantiate+0x10/0x10 [ 216.426805][ T5835] ? gfs2_glock_nq+0xedd/0x15f0 [ 216.426829][ T5835] gfs2_instantiate+0x168/0x220 [ 216.426850][ T5835] gfs2_glock_wait+0x1d4/0x2a0 [ 216.426872][ T5835] do_sync+0x46f/0xc60 [ 216.426893][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 216.426913][ T5835] ? gfs2_quota_sync+0x359/0x460 [ 216.426944][ T5835] ? __pfx_do_sync+0x10/0x10 [ 216.426976][ T5835] ? gfs2_quota_sync+0x359/0x460 [ 216.427003][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 216.427031][ T5835] gfs2_quota_sync+0x359/0x460 [ 216.427074][ T5835] gfs2_sync_fs+0x4c/0xb0 [ 216.427114][ T5835] sync_filesystem+0xee/0x230 [ 216.427139][ T5835] generic_shutdown_super+0x6f/0x2c0 [ 216.427166][ T5835] kill_block_super+0x44/0x90 [ 216.427188][ T5835] deactivate_locked_super+0xbc/0x130 [ 216.427227][ T5835] cleanup_mnt+0x425/0x4c0 [ 216.427269][ T5835] ? lockdep_hardirqs_on+0x98/0x140 [ 216.427297][ T5835] task_work_run+0x1d4/0x260 [ 216.427326][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 216.427347][ T5835] ? exit_to_user_mode_loop+0x55/0x4f0 [ 216.427364][ T5835] exit_to_user_mode_loop+0xff/0x4f0 [ 216.427376][ T5835] ? rcu_is_watching+0x15/0xb0 [ 216.427396][ T5835] do_syscall_64+0x2d0/0xf80 [ 216.427414][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.427426][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 216.427442][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.427454][ T5835] RIP: 0033:0x7fad00790a77 [ 216.427474][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 216.427484][ T5835] RSP: 002b:00007fff9ab35418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 216.427501][ T5835] RAX: 0000000000000000 RBX: 00007fad00813d7d RCX: 00007fad00790a77 [ 216.427509][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9ab354d0 [ 216.427517][ T5835] RBP: 00007fff9ab354d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.427524][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9ab36560 [ 216.427532][ T5835] R13: 00007fad00813d7d R14: 0000000000033f9a R15: 00007fff9ab365a0 [ 216.427552][ T5835] [ 216.428802][ T5835] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 216.476406][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 216.476457][ T30] audit: type=1326 audit(2000000004.200:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 216.732196][ T5898] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 216.757904][ T5898] usb 1-1: USB disconnect, device number 22 [ 216.788411][ T30] audit: type=1326 audit(2000000004.500:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2ad8df90 code=0x7ffc0000 [ 216.814903][ T30] audit: type=1326 audit(2000000004.500:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 216.920065][ T30] audit: type=1326 audit(2000000004.510:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 216.947207][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 216.947364][ T30] audit: type=1326 audit(2000000004.540:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 216.978744][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 216.992318][ T30] audit: type=1326 audit(2000000004.540:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 217.015493][ T30] audit: type=1326 audit(2000000004.540:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 217.056333][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 217.117330][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 217.154558][ T9] usb 2-1: USB disconnect, device number 7 [ 217.170922][ T30] audit: type=1326 audit(2000000004.540:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 217.254833][ T30] audit: type=1326 audit(2000000004.540:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 217.279942][ T30] audit: type=1326 audit(2000000004.540:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2ad8f749 code=0x7ffc0000 [ 217.482631][ T7789] loop0: detected capacity change from 0 to 4096 [ 217.544024][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.585060][ T7789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.874203][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.508266][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.519949][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.529955][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.543116][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.553020][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.564012][ T9] usb 2-1: config 0 descriptor?? [ 218.599759][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.997032][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 219.003091][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.070510][ T9] usb 2-1: USB disconnect, device number 8 [ 220.024055][ T6052] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 220.205638][ T6052] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 220.234004][ T6052] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.269327][ T6052] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 220.286168][ T6052] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 220.347844][ T6052] usb 2-1: Manufacturer: syz [ 220.368090][ T6052] usb 2-1: SerialNumber: syz [ 220.603631][ T6052] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 220.643313][ T6052] usb 2-1: USB disconnect, device number 9 [ 220.767481][ T7820] tipc: Enabled bearer , priority 0 [ 220.940156][ T7819] tipc: Disabling bearer [ 221.040236][ T7822] loop0: detected capacity change from 0 to 1024 [ 221.054352][ T7822] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 221.154473][ T7822] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 221.174533][ T7822] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.182663][ T7822] EXT4-fs error (device loop0): ext4_free_blocks:6727: comm syz.0.536: Freeing blocks not in datazone - block = 0, count = 4096 [ 221.201250][ T7822] EXT4-fs (loop0): 1 orphan inode deleted [ 221.216047][ T7822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.243704][ T7831] loop1: detected capacity change from 0 to 512 [ 221.265765][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.326017][ T7831] ======================================================= [ 221.326017][ T7831] WARNING: The mand mount option has been deprecated and [ 221.326017][ T7831] and is ignored by this kernel. Remove the mand [ 221.326017][ T7831] option from the mount to silence this warning. [ 221.326017][ T7831] ======================================================= [ 221.532972][ T7831] EXT4-fs (loop1): 1 truncate cleaned up [ 221.552022][ T7831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.611064][ T7841] loop0: detected capacity change from 0 to 2048 [ 221.795316][ T7831] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.539: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 221.832807][ T7831] EXT4-fs (loop1): Remounting filesystem read-only [ 222.003071][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.034034][ T7841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.455841][ T7854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.856581][ T5898] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 224.024262][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.050052][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.090233][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.128949][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.153601][ T5898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.387914][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.465251][ T5898] usb 1-1: config 0 descriptor?? [ 224.758980][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 224.970970][ T7878] vlan2: entered promiscuous mode [ 224.976177][ T7878] syz_tun: entered promiscuous mode [ 225.357590][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.368704][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.376516][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.524575][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.538467][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.547539][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.555386][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.562940][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 225.572028][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.579569][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 225.594135][ T24] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 225.621995][ T5898] usb 1-1: USB disconnect, device number 23 [ 225.630001][ T24] hid-generic 0003:0003:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 226.134382][ T7885] fido_id[7885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.289653][ T7906] loop4: detected capacity change from 0 to 136 [ 228.645606][ T9] hid-generic 0003:0003:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 228.774159][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 228.784301][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 229.201389][ T7921] fido_id[7921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.322499][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.518901][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.535770][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.549790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.589464][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.603077][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.613173][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.638953][ T9] usb 5-1: config 0 descriptor?? [ 230.058387][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 230.068804][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 230.078731][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 230.112764][ T9] usb 5-1: USB disconnect, device number 10 [ 231.691841][ T7956] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 232.675648][ T9] hid_parser_main: 26 callbacks suppressed [ 232.675668][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.707362][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.721035][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.732242][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.740537][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.752987][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 232.759550][ T7962] loop1: detected capacity change from 0 to 32768 [ 232.773762][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 233.026839][ T7962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.571 (7962) [ 233.087176][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 233.111571][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 233.139739][ T9] hid-generic 0003:0003:0000.0008: unknown main item tag 0x0 [ 233.199877][ T9] hid-generic 0003:0003:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 233.223374][ T7962] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.244354][ T7962] BTRFS info (device loop1): using crc32c checksum algorithm [ 233.264456][ T7962] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 233.425136][ T7976] fido_id[7976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.500709][ T7962] BTRFS info (device loop1): rebuilding free space tree [ 233.646634][ T7962] BTRFS info (device loop1): disabling free space tree [ 233.653607][ T7962] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.717089][ T7962] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.787369][ T7962] BTRFS info (device loop1): enabling ssd optimizations [ 233.804477][ T7962] BTRFS info (device loop1): enabling disk space caching [ 233.813580][ T7962] BTRFS info (device loop1): force clearing of disk cache [ 233.831491][ T7962] BTRFS info (device loop1): force zstd compression, level 3 [ 233.854122][ T7881] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.017789][ T7881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.047359][ T7881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 234.080254][ T7881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.104892][ T7881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.139737][ T7881] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.169095][ T7881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.201129][ T7881] usb 1-1: config 0 descriptor?? [ 234.303253][ T5830] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.565298][ T8010] loop4: detected capacity change from 0 to 128 [ 234.932718][ T7881] usbhid 1-1:0.0: can't add hid device: -71 [ 234.979343][ T7881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 235.044182][ T7881] usb 1-1: USB disconnect, device number 24 [ 235.753983][ T5912] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 235.906975][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.918971][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.932588][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.951839][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.181693][ T5912] usb 1-1: GET_CAPABILITIES returned 0 [ 236.193026][ T5912] usbtmc 1-1:16.0: can't read capabilities [ 236.873478][ T8052] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 236.897275][ T5912] usb 1-1: USB disconnect, device number 25 [ 238.114049][ T5912] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.295874][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.321094][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.354169][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.413975][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.427171][ T5912] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.463951][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.494979][ T5912] usb 5-1: config 0 descriptor?? [ 238.682224][ T8060] loop0: detected capacity change from 0 to 32768 [ 238.723137][ T8060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.600 (8060) [ 238.780219][ T8060] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.819351][ T8060] BTRFS info (device loop0): using sha256 checksum algorithm [ 238.916057][ T5912] usbhid 5-1:0.0: can't add hid device: -71 [ 238.922098][ T5912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 238.989850][ T5912] usb 5-1: USB disconnect, device number 11 [ 239.007295][ T8060] BTRFS info (device loop0): rebuilding free space tree [ 239.091128][ T8060] BTRFS info (device loop0): disabling free space tree [ 239.207900][ T8060] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 239.287568][ T8060] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 239.428964][ T8060] BTRFS info (device loop0): setting nodatasum [ 239.438936][ T8060] BTRFS info (device loop0): setting nodatacow [ 239.509930][ T8060] BTRFS info (device loop0): turning off barriers [ 239.522392][ T8060] BTRFS info (device loop0): force clearing of disk cache [ 239.568432][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 239.568459][ T30] audit: type=1800 audit(2000000002.990:682): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.600" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 240.304019][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 240.362281][ T5841] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.469527][ T9] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 240.481968][ T9] usb 2-1: config 4 has no interface number 0 [ 240.492859][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 240.502173][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.510774][ T9] usb 2-1: Product: syz [ 240.521550][ T9] usb 2-1: Manufacturer: syz [ 240.541024][ T9] usb 2-1: SerialNumber: syz [ 240.608645][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input5 [ 240.772114][ T5184] bcm5974 2-1:4.28: could not read from device [ 240.848219][ T9] bcm5974 2-1:4.28: could not read from device [ 241.001676][ T5184] bcm5974 2-1:4.28: could not read from device [ 241.040653][ T9] input: failed to attach handler mousedev to device input5, error: -5 [ 241.123811][ T5184] bcm5974 2-1:4.28: could not read from device [ 241.131957][ T9] usb 2-1: USB disconnect, device number 10 [ 242.704064][ T7872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 242.900322][ T7872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.915196][ T7872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.926973][ T7872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 242.938326][ T7872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.954290][ T7872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.963535][ T7872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.994864][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 243.050430][ T7872] usb 5-1: config 0 descriptor?? [ 243.148282][ T8142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'. [ 243.160609][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 243.773294][ T7872] usbhid 5-1:0.0: can't add hid device: -71 [ 243.794754][ T7872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.814266][ T7872] usb 5-1: USB disconnect, device number 12 [ 246.079132][ T8154] syzkaller0: entered promiscuous mode [ 246.165267][ T8154] syzkaller0: entered allmulticast mode [ 247.202653][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.756052][ T5898] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 248.768020][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.780660][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.807408][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 248.824540][ T5898] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 248.835145][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.855847][ T5898] usb 5-1: config 0 descriptor?? [ 249.470865][ T5898] hid_parser_main: 8 callbacks suppressed [ 249.470890][ T5898] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x7 [ 249.495199][ T5898] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 249.509814][ T5898] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 249.557516][ T5898] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 249.557551][ T5898] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x0 [ 249.735999][ T5898] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found [ 250.432193][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 251.468120][ T8198] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 251.935713][ T8161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.996664][ T8184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.046760][ T123] usb 5-1: USB disconnect, device number 13 [ 253.374512][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 255.484039][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'. [ 255.599104][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.605535][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176639][ T8253] netlink: 324 bytes leftover after parsing attributes in process `syz.2.653'. [ 257.134237][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.285936][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 257.375780][ T8260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.652'. [ 257.387375][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 257.471614][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.492219][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.517575][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 257.572479][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 257.601496][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.664848][ T9] usb 4-1: config 0 descriptor?? [ 258.248070][ T8246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.261680][ T9] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x7 [ 258.292253][ T9] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 258.319504][ T8264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.344353][ T9] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 258.368494][ T9] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 258.395501][ T9] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 258.498028][ T9] hid-picolcd 0003:04D8:C002.000A: No report with id 0x11 found [ 258.545579][ T9] usb 4-1: USB disconnect, device number 10 [ 258.628944][ T8267] loop0: detected capacity change from 0 to 4096 [ 258.673023][ T8267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.587362][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.867887][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 260.881166][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 260.911856][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 261.356045][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.374083][ T10] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 261.385626][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.394905][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.473296][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.499798][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.548540][ T10] usb 5-1: Product: syz [ 261.563070][ T10] usb 5-1: Manufacturer: syz [ 261.597027][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 263.470028][ T6052] usb 5-1: USB disconnect, device number 14 [ 263.520974][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.666'. [ 263.959510][ T8317] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.668'. [ 264.795229][ T8173] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.953918][ T8173] usb 2-1: Using ep0 maxpacket: 8 [ 264.968532][ T8173] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 264.979431][ T8173] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 264.993970][ T8173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.009927][ T8173] usb 2-1: Product: syz [ 265.014577][ T8173] usb 2-1: Manufacturer: syz [ 265.019414][ T8173] usb 2-1: SerialNumber: syz [ 265.038431][ T8173] usb 2-1: config 0 descriptor?? [ 265.048312][ T8173] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 265.058941][ T8173] usb 2-1: setting power ON [ 265.064155][ T8173] dvb-usb: bulk message failed: -22 (2/0) [ 265.125694][ T8173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.171075][ T8173] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 265.189904][ T8173] usb 2-1: media controller created [ 265.222739][ T8173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.292584][ T8173] usb 2-1: selecting invalid altsetting 6 [ 265.299214][ T8173] usb 2-1: digital interface selection failed (-22) [ 265.306708][ T8173] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 265.317154][ T8173] usb 2-1: setting power OFF [ 265.322065][ T8173] dvb-usb: bulk message failed: -22 (2/0) [ 265.328641][ T8173] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 265.338151][ T8173] (NULL device *): no alternate interface [ 265.380926][ T8173] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 265.575117][ T8173] usb 2-1: USB disconnect, device number 11 [ 265.646183][ T8342] batadv_slave_0: entered promiscuous mode [ 265.888186][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 265.944423][ T5912] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 266.115899][ T5912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.134164][ T5912] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 266.136510][ T8342] batadv_slave_0: left promiscuous mode [ 266.156388][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.165627][ T5912] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.188481][ T5912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.198062][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.213193][ T5912] usb 4-1: Product: syz [ 266.223094][ T5912] usb 4-1: Manufacturer: syz [ 266.247488][ T5912] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 266.284819][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.437769][ T10] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 266.447591][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.482065][ T10] usb 2-1: Product: syz [ 266.486535][ T10] usb 2-1: Manufacturer: syz [ 266.525074][ T10] usb 2-1: SerialNumber: syz [ 266.536806][ T10] usb 2-1: config 0 descriptor?? [ 266.552936][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 266.560824][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 266.746341][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 266.760595][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.775017][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 266.789010][ T10] usb 2-1: media controller created [ 266.823607][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.634677][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 267.914102][ T10] DVB: Unable to find symbol dib7000p_attach() [ 267.922904][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 268.742722][ T5991] usb 4-1: USB disconnect, device number 11 [ 268.974519][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 268.980826][ T10] Registered IR keymap rc-empty [ 270.301742][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'. [ 270.680320][ T8400] batadv_slave_0: entered promiscuous mode [ 271.005981][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 271.279950][ T8400] batadv_slave_0: left promiscuous mode [ 271.991388][ T10] dvb-usb: could not initialize remote control. [ 272.051892][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 272.273107][ T8412] loop4: detected capacity change from 0 to 32768 [ 272.310270][ T10] usb 2-1: USB disconnect, device number 12 [ 272.458555][ T8412] JBD2: Ignoring recovery information on journal [ 272.592249][ T8419] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.695'. [ 272.721007][ T8412] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 272.854981][ T8412] (syz.4.693,8412,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 272.867205][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 273.255179][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 273.335504][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 273.435869][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.467836][ T10] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 273.510204][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.522468][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.548419][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.563644][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.577199][ T10] usb 2-1: Product: syz [ 273.602748][ T10] usb 2-1: Manufacturer: syz [ 273.647872][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 274.141395][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 274.458779][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 275.707135][ T6052] usb 2-1: USB disconnect, device number 13 [ 276.013593][ T8459] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.706'. [ 277.029921][ T8474] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 277.054014][ T123] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 277.204486][ T8474] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 277.274071][ T123] usb 4-1: Using ep0 maxpacket: 16 [ 277.284422][ T123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 277.314817][ T8474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.323066][ T123] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.334687][ T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.350815][ T123] usb 4-1: Product: syz [ 277.358214][ T123] usb 4-1: Manufacturer: syz [ 277.364249][ T123] usb 4-1: SerialNumber: syz [ 277.373615][ T123] usb 4-1: config 0 descriptor?? [ 277.393945][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 277.402201][ T123] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.415708][ T123] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 277.450307][ T8483] bond_slave_0: entered promiscuous mode [ 277.456167][ T8483] bond_slave_1: entered promiscuous mode [ 277.461908][ T8483] syz_tun: entered promiscuous mode [ 277.475460][ T8483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.489003][ T8483] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 277.498789][ T8483] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 277.519033][ T8483] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 277.573402][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 277.589396][ T10] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 277.603085][ T10] usb 3-1: config 8 has no interface number 0 [ 277.612697][ T10] usb 3-1: config 8 interface 35 has no altsetting 0 [ 277.646748][ T10] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 277.657196][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.674011][ T10] usb 3-1: Product: syz [ 277.689579][ T10] usb 3-1: Manufacturer: syz [ 277.725961][ T10] usb 3-1: SerialNumber: syz [ 277.933950][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.988778][ T123] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 278.038953][ T10] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 278.065004][ T10] usb 3-1: USB disconnect, device number 14 [ 278.101454][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.154314][ T5912] usb 5-1: config 0 has no interface number 0 [ 278.160583][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.212485][ T5912] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.236679][ T5912] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.270915][ T5912] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 278.303926][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.329999][ T5912] usb 5-1: config 0 descriptor?? [ 278.429389][ T123] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 278.448215][ T123] em28xx 4-1:0.0: board has no eeprom [ 279.104049][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.256679][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 279.265123][ T10] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 279.273814][ T10] usb 3-1: config 8 has no interface number 0 [ 279.280371][ T10] usb 3-1: config 8 interface 35 has no altsetting 0 [ 279.303078][ T10] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 279.322838][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.332963][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 279.350446][ T10] usb 3-1: Product: syz [ 279.356388][ T10] usb 3-1: Manufacturer: syz [ 279.361046][ T10] usb 3-1: SerialNumber: syz [ 279.694710][ T8463] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 279.734120][ T123] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 279.745316][ T10] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 279.760914][ T123] em28xx 4-1:0.0: dvb set to bulk mode. [ 279.771786][ T10] usb 3-1: USB disconnect, device number 15 [ 279.785340][ T5975] em28xx 4-1:0.0: Binding DVB extension [ 279.807068][ T123] usb 4-1: USB disconnect, device number 12 [ 279.876177][ T123] em28xx 4-1:0.0: Disconnecting em28xx [ 279.959467][ T5975] em28xx 4-1:0.0: Registering input extension [ 279.970816][ T123] em28xx 4-1:0.0: Closing input extension [ 280.082700][ T123] em28xx 4-1:0.0: Freeing device [ 280.116227][ T5912] usbhid 5-1:0.1: can't add hid device: -71 [ 280.146560][ T5912] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 280.183722][ T5912] usb 5-1: USB disconnect, device number 15 [ 280.405900][ T8515] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.721'. [ 280.746339][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 280.755427][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 280.931243][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 281.154658][ T5912] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 281.626763][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.642315][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.680285][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 281.714970][ T5912] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 281.734044][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.758420][ T5912] usb 5-1: config 0 descriptor?? [ 282.325837][ T8521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.374022][ T6052] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.534147][ T6052] usb 3-1: Using ep0 maxpacket: 32 [ 282.577968][ T8544] loop0: detected capacity change from 0 to 32768 [ 282.590859][ T5912] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x7 [ 282.600973][ T8544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.729 (8544) [ 282.623996][ T5912] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 282.632733][ T6052] usb 3-1: config 8 has an invalid interface number: 35 but max is 0 [ 282.639284][ T5912] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 282.651348][ T5912] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 282.659408][ T5912] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 282.668390][ T6052] usb 3-1: config 8 has no interface number 0 [ 282.668425][ T6052] usb 3-1: config 8 interface 35 has no altsetting 0 [ 282.672571][ T6052] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 282.719952][ T8544] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.730180][ T8544] BTRFS info (device loop0): using sha256 checksum algorithm [ 282.752631][ T8541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.799630][ T6052] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.801918][ T5912] hid-picolcd 0003:04D8:C002.000B: No report with id 0x11 found [ 282.833984][ T6052] usb 3-1: Product: syz [ 282.838186][ T6052] usb 3-1: Manufacturer: syz [ 282.853096][ T6052] usb 3-1: SerialNumber: syz [ 282.924393][ T5912] usb 5-1: USB disconnect, device number 16 [ 282.935606][ T8544] BTRFS info (device loop0): enabling ssd optimizations [ 282.942614][ T8544] BTRFS info (device loop0): turning on async discard [ 282.955097][ T8544] BTRFS info (device loop0): enabling free space tree [ 284.104749][ T5841] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.228153][ T6052] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 284.291656][ T6052] usb 3-1: USB disconnect, device number 16 [ 284.546231][ T8576] loop0: detected capacity change from 0 to 4096 [ 284.557323][ T8578] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.735'. [ 284.604713][ T8576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.821098][ T8585] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 284.879661][ T8588] tipc: Started in network mode [ 284.894374][ T8588] tipc: Node identity 42ccbd465d55, cluster identity 4711 [ 284.910961][ T8588] tipc: Enabled bearer , priority 0 [ 285.433515][ T8592] syzkaller0: entered promiscuous mode [ 285.459884][ T8592] syzkaller0: entered allmulticast mode [ 285.527435][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.553086][ T8587] tipc: Resetting bearer [ 285.709535][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 285.754619][ T8587] tipc: Disabling bearer [ 286.219049][ T8604] batadv_slave_0: entered promiscuous mode [ 286.695649][ T8604] batadv_slave_0: left promiscuous mode [ 287.374057][ T5912] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.545992][ T5912] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 287.563923][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.752644][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.816086][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 287.905213][ T5912] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 287.942829][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.991453][ T5912] usb 4-1: config 0 descriptor?? [ 288.127809][ T8632] tipc: Enabling of bearer rejected, failed to enable media [ 288.333764][ T8636] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.749'. [ 288.495531][ T8619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.541237][ T5912] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x7 [ 288.566136][ T5912] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 288.591249][ T5912] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 288.611250][ T5912] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 288.631777][ T5912] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 288.650927][ T8642] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 288.658628][ T8637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.774203][ T5912] hid-picolcd 0003:04D8:C002.000C: No report with id 0x11 found [ 288.841036][ T5912] usb 4-1: USB disconnect, device number 13 [ 289.363472][ T8655] batadv_slave_0: entered promiscuous mode [ 291.306455][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 291.317618][ T8655] batadv_slave_0: left promiscuous mode [ 291.344842][ T5975] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 291.410552][ T8679] loop3: detected capacity change from 0 to 2048 [ 291.432131][ T5975] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 291.649136][ T8680] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.761'. [ 291.680235][ T8679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.705719][ T8690] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 291.837282][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.986060][ T8704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.767'. [ 295.130529][ T8731] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.775'. [ 295.225551][ T8733] batadv_slave_0: entered promiscuous mode [ 295.396788][ T8736] fuse: Bad value for 'fd' [ 295.409663][ T8736] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 295.605913][ T8741] tipc: Enabled bearer , priority 0 [ 295.640412][ T8741] syzkaller0: entered promiscuous mode [ 295.656468][ T8741] syzkaller0: entered allmulticast mode [ 295.693967][ T8741] tipc: Resetting bearer [ 295.867399][ T8740] tipc: Resetting bearer [ 295.904928][ T8740] tipc: Disabling bearer [ 296.101907][ T8733] batadv_slave_0: left promiscuous mode [ 296.523616][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 297.506119][ T8773] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.788'. [ 297.849037][ T8777] fuse: Bad value for 'fd' [ 297.864993][ T8777] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 300.317839][ T8791] tipc: Enabled bearer , priority 0 [ 300.335137][ T8791] syzkaller0: entered promiscuous mode [ 300.351151][ T8791] syzkaller0: entered allmulticast mode [ 300.418923][ T8791] tipc: Resetting bearer [ 300.489854][ T8790] tipc: Resetting bearer [ 300.569341][ T8790] tipc: Disabling bearer [ 301.013949][ T5912] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 301.072112][ T8805] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.800'. [ 301.144016][ T5912] usb 4-1: device descriptor read/64, error -71 [ 301.403958][ T5912] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 301.830222][ T5912] usb 4-1: device descriptor read/64, error -71 [ 301.972022][ T5912] usb usb4-port1: attempt power cycle [ 302.333992][ T5912] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 302.364892][ T5912] usb 4-1: device descriptor read/8, error -71 [ 302.631400][ T5912] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 302.704982][ T5912] usb 4-1: device descriptor read/8, error -71 [ 302.814237][ T5912] usb usb4-port1: unable to enumerate USB device [ 302.882853][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 304.627489][ T8847] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.811'. [ 308.821990][ T8890] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.823'. [ 309.405716][ T8894] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 309.436775][ T8894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.475464][ T8898] loop4: detected capacity change from 0 to 2048 [ 309.558165][ T8898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.601975][ T8917] tipc: Enabled bearer , priority 0 [ 311.703083][ T8916] tipc: Disabling bearer [ 315.879075][ T8969] tipc: Enabled bearer , priority 0 [ 315.986632][ T8968] tipc: Disabling bearer [ 317.002783][ T8971] loop0: detected capacity change from 0 to 32768 [ 317.040707][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.048283][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.209203][ T8971] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.292455][ T8971] XFS (loop0): Ending clean mount [ 317.333588][ T8971] XFS (loop0): Quotacheck needed: Please wait. [ 317.387497][ T8971] XFS (loop0): Quotacheck: Done. [ 317.557157][ T5841] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 318.175602][ T8999] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 319.147839][ T9008] tipc: Enabled bearer , priority 0 [ 319.207995][ T9007] tipc: Disabling bearer [ 319.243938][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 319.283918][ T5991] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 319.396617][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 319.479786][ T5991] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 319.535366][ T9012] futex_wake_op: syz.1.858 tries to shift op by 36; fix this program [ 319.602398][ T9011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.614260][ T9011] block device autoloading is deprecated and will be removed. [ 320.397494][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.406804][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.424456][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.432493][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.445099][ T5991] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 320.465104][ T5991] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 320.476499][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.487662][ T5991] usb 1-1: config 0 descriptor?? [ 320.917904][ T9006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.188301][ T5991] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x7 [ 321.196861][ T5991] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 321.204375][ T5991] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 321.213354][ T5991] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 321.221624][ T5991] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 321.262780][ T9006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.367146][ T5991] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 321.415247][ T5991] usb 1-1: USB disconnect, device number 26 [ 322.531837][ T5991] usb 5-1: USB disconnect, device number 17 [ 322.855298][ T9041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.864770][ T9041] overlayfs: missing 'lowerdir' [ 323.803422][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 323.817667][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 323.886432][ T9049] tipc: Enabled bearer , priority 0 [ 323.996300][ T9049] syzkaller0: entered promiscuous mode [ 324.001887][ T9049] syzkaller0: entered allmulticast mode [ 324.009496][ T9049] tipc: Resetting bearer [ 324.118311][ T9048] tipc: Resetting bearer [ 324.184603][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 326.616477][ T9054] loop1: detected capacity change from 0 to 131072 [ 326.638437][ T9054] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 326.666275][ T9054] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 326.690502][ T9054] F2FS-fs (loop1): invalid crc value [ 326.922685][ T9054] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 327.705226][ T9078] loop0: detected capacity change from 0 to 32768 [ 327.760732][ T9078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.878 (9078) [ 327.788350][ T9079] loop3: detected capacity change from 0 to 40427 [ 327.809366][ T9079] F2FS-fs (loop3): build fault injection rate: 14 [ 327.819604][ T9078] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.829293][ T9079] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 327.859957][ T9078] BTRFS info (device loop0): using crc32c checksum algorithm [ 327.878873][ T9079] F2FS-fs (loop3): invalid crc value [ 327.931845][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 327.951605][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 328.103022][ T9078] BTRFS info (device loop0): enabling ssd optimizations [ 328.150992][ T9078] BTRFS info (device loop0): turning on async discard [ 328.182758][ T9078] BTRFS info (device loop0): enabling free space tree [ 328.226803][ T30] audit: type=1800 audit(2000000001.210:683): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.878" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 328.250212][ T9079] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 328.276507][ T9079] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 328.299657][ T9079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 328.382115][ T9079] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40 [ 328.485290][ T9101] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 328.503098][ T9101] F2FS-fs (loop3): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 328.565420][ T5841] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.572834][ T9102] F2FS-fs (loop3): inject evict_inode fail in f2fs_evict_inode of evict+0x5f4/0xae0 [ 329.079358][ T9048] tipc: Disabling bearer [ 329.092300][ T48] tipc: Node number set to 597001552 [ 329.358479][ T30] audit: type=1326 audit(2000000002.350:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 329.903104][ T30] audit: type=1326 audit(2000000002.380:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 329.952163][ T30] audit: type=1326 audit(2000000002.380:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.008007][ T30] audit: type=1326 audit(2000000002.380:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.064107][ T30] audit: type=1326 audit(2000000002.380:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.123062][ T30] audit: type=1326 audit(2000000002.380:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.232999][ T30] audit: type=1326 audit(2000000002.380:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.313774][ T30] audit: type=1326 audit(2000000002.380:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 330.414588][ T30] audit: type=1326 audit(2000000002.380:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ddd8f749 code=0x7ffc0000 [ 332.264116][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 332.458836][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.495605][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 332.495636][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.514918][ T5911] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 332.514937][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.514950][ T5911] usb 3-1: Product: syz [ 332.514959][ T5911] usb 3-1: Manufacturer: syz [ 332.514968][ T5911] usb 3-1: SerialNumber: syz [ 332.517266][ T5911] usb 3-1: config 0 descriptor?? [ 332.551573][ T5911] adutux 3-1:0.0: interrupt endpoints not found [ 332.561188][ T9134] binder: BINDER_SET_CONTEXT_MGR already set [ 332.561230][ T9134] binder: 9133:9134 ioctl 4018620d 200000004a80 returned -16 [ 332.562036][ T9134] binder: 9133:9134 ioctl c0306201 200000000dc0 returned -14 [ 333.583393][ T9144] input: syz1 as /devices/virtual/input/input8 [ 334.018473][ T9161] loop1: detected capacity change from 0 to 136 [ 335.662680][ T5991] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 335.729225][ T5911] usb 3-1: USB disconnect, device number 17 [ 335.863412][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 335.881588][ T5991] usb 5-1: config 8 has an invalid interface number: 35 but max is 0 [ 335.893040][ T5991] usb 5-1: config 8 has no interface number 0 [ 335.899475][ T5991] usb 5-1: config 8 interface 35 has no altsetting 0 [ 335.912176][ T5991] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=83.3e [ 335.950005][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.964133][ T5991] usb 5-1: Product: syz [ 335.968328][ T5991] usb 5-1: Manufacturer: syz [ 335.972949][ T5991] usb 5-1: SerialNumber: syz [ 336.341431][ T5991] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 336.381021][ T5991] usb 5-1: USB disconnect, device number 18 [ 337.022736][ T9187] netlink: 260 bytes leftover after parsing attributes in process `syz.1.908'. [ 338.904047][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 339.203960][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.285630][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 339.385477][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.470766][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.903198][ T5911] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 340.002713][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.118043][ T5911] usb 5-1: Product: syz [ 340.134589][ T5911] usb 5-1: Manufacturer: syz [ 340.139316][ T5911] usb 5-1: SerialNumber: syz [ 340.183728][ T9203] syzkaller0: entered promiscuous mode [ 340.189460][ T9203] syzkaller0: entered allmulticast mode [ 340.219372][ T5911] usb 5-1: config 0 descriptor?? [ 340.280042][ T5911] adutux 5-1:0.0: interrupt endpoints not found [ 340.382118][ T9212] loop3: detected capacity change from 0 to 32768 [ 340.391455][ T9212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.914 (9212) [ 340.410768][ T9212] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.421735][ T9212] BTRFS info (device loop3): using sha256 checksum algorithm [ 340.638780][ T9212] BTRFS info (device loop3): enabling ssd optimizations [ 340.645884][ T9212] BTRFS info (device loop3): turning on async discard [ 340.652753][ T9212] BTRFS info (device loop3): enabling free space tree [ 341.419533][ T5847] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.882984][ T5911] usb 5-1: USB disconnect, device number 19 [ 346.367668][ T123] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 346.539847][ T123] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.619436][ T123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 346.663998][ T123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.692578][ T123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.740355][ T123] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 346.772240][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 346.855228][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.863310][ T123] usb 5-1: Product: syz [ 346.867529][ T123] usb 5-1: Manufacturer: syz [ 346.873454][ T123] usb 5-1: SerialNumber: syz [ 346.891956][ T123] usb 5-1: config 0 descriptor?? [ 346.921868][ T123] adutux 5-1:0.0: interrupt endpoints not found [ 349.229702][ T5991] usb 5-1: USB disconnect, device number 20 [ 349.533555][ T9319] fuse: Bad value for 'fd' [ 351.309634][ T9331] loop4: detected capacity change from 0 to 136 [ 353.653334][ T123] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.660990][ T5912] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 354.030005][ T123] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 354.467777][ T5912] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 354.487235][ T123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.507930][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.521155][ T123] usb 2-1: Product: syz [ 354.530674][ T123] usb 2-1: Manufacturer: syz [ 354.547608][ T123] usb 2-1: SerialNumber: syz [ 354.553261][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.575766][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 354.595044][ T123] usb 2-1: config 0 descriptor?? [ 354.671315][ T123] hub 2-1:0.0: bad descriptor, ignoring hub [ 354.687523][ T5912] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 354.704646][ T123] hub 2-1:0.0: probe with driver hub failed with error -5 [ 354.716433][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.762509][ T5912] usb 4-1: config 0 descriptor?? [ 354.803282][ T123] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 354.831138][ T123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.842530][ T123] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 354.854938][ T123] usb 2-1: media controller created [ 354.908645][ T123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.043540][ T123] DVB: Unable to find symbol dib7000p_attach() [ 356.064055][ T123] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 356.214091][ T9350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.388128][ T5912] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x7 [ 356.444165][ T5912] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 356.492981][ T5912] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 356.537342][ T5912] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 356.545898][ T9369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.597032][ T5912] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 358.427721][ T5912] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 358.439787][ T123] rc_core: IR keymap rc-dib0700-rc5 not found [ 358.829117][ T123] Registered IR keymap rc-empty [ 358.829402][ T123] dvb-usb: could not initialize remote control. [ 358.829413][ T123] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 358.841401][ T5912] usb 4-1: USB disconnect, device number 18 [ 358.842561][ T123] usb 2-1: USB disconnect, device number 14 [ 358.947962][ T123] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 361.658115][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 361.995593][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 362.158050][ T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 362.167453][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.185646][ T10] usb 4-1: Product: syz [ 362.197541][ T10] usb 4-1: Manufacturer: syz [ 362.218474][ T10] usb 4-1: SerialNumber: syz [ 362.282446][ T10] usb 4-1: config 0 descriptor?? [ 362.319312][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 362.339131][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 362.520293][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 362.567293][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 362.592696][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 362.613580][ T10] usb 4-1: media controller created [ 362.696058][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.900227][ T10] DVB: Unable to find symbol dib7000p_attach() [ 362.914989][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 363.230649][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 363.261876][ T10] Registered IR keymap rc-empty [ 363.296943][ T10] dvb-usb: could not initialize remote control. [ 363.317778][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 363.634130][ T10] usb 4-1: USB disconnect, device number 19 [ 363.804125][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 365.251495][ T9433] loop3: detected capacity change from 0 to 4096 [ 365.276904][ T9433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.848345][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.073103][ T9474] tipc: Enabled bearer , priority 0 [ 371.081671][ T9474] syzkaller0: entered promiscuous mode [ 371.087580][ T9474] syzkaller0: entered allmulticast mode [ 371.126603][ T9474] tipc: Resetting bearer [ 371.138830][ T9473] tipc: Resetting bearer [ 371.251738][ T9473] tipc: Disabling bearer [ 371.329790][ T9478] loop2: detected capacity change from 0 to 136 [ 371.394319][ T5991] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 371.642854][ T5991] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 372.177188][ T9480] loop2: detected capacity change from 0 to 131072 [ 372.207030][ T9480] F2FS-fs (loop2): invalid crc value [ 372.227841][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.279210][ T9480] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.289765][ T9480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 372.320470][ T5991] usb 5-1: Product: syz [ 372.347729][ T5991] usb 5-1: Manufacturer: syz [ 372.355913][ T5991] usb 5-1: SerialNumber: syz [ 372.387729][ T5991] usb 5-1: config 0 descriptor?? [ 372.413203][ T5991] hub 5-1:0.0: bad descriptor, ignoring hub [ 372.422710][ T5991] hub 5-1:0.0: probe with driver hub failed with error -5 [ 372.640793][ T5991] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 372.895893][ T5991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.979975][ T5991] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 373.066847][ T5991] usb 5-1: media controller created [ 373.158442][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.319008][ T5991] DVB: Unable to find symbol dib7000p_attach() [ 373.325445][ T5991] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 373.424722][ T5991] rc_core: IR keymap rc-dib0700-rc5 not found [ 373.430841][ T5991] Registered IR keymap rc-empty [ 373.460180][ T5991] dvb-usb: could not initialize remote control. [ 373.469248][ T9496] loop3: detected capacity change from 0 to 4096 [ 373.488993][ T5991] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 373.737562][ T9496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.739967][ T5991] usb 5-1: USB disconnect, device number 21 [ 373.820314][ T5991] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 374.102286][ T9508] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 374.809817][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.065580][ T9515] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 375.519188][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.996'. [ 375.530662][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 376.406858][ T9531] loop1: detected capacity change from 0 to 136 [ 378.471934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.478577][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.506316][ T9570] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 380.623589][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 380.651488][ T5885] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 380.844062][ T5885] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 380.853321][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.876278][ T5885] usb 1-1: Product: syz [ 380.896544][ T5885] usb 1-1: Manufacturer: syz [ 380.913604][ T5885] usb 1-1: SerialNumber: syz [ 380.943726][ T5885] usb 1-1: config 0 descriptor?? [ 380.964342][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 381.091880][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 381.383295][ T5885] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 381.447710][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.479419][ T5885] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 381.540271][ T5885] usb 1-1: media controller created [ 381.618362][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.942777][ T5885] DVB: Unable to find symbol dib7000p_attach() [ 381.949339][ T5885] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 382.169418][ T9588] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 382.189095][ T5885] rc_core: IR keymap rc-dib0700-rc5 not found [ 382.195388][ T5885] Registered IR keymap rc-empty [ 382.296350][ T5885] dvb-usb: could not initialize remote control. [ 382.325212][ T5885] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 382.516385][ T5885] usb 1-1: USB disconnect, device number 27 [ 382.658811][ T5885] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 383.520021][ T9605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1014'. [ 383.541456][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 385.877416][ T9617] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 387.540431][ T9637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.557953][ T9640] bond_slave_0: entered promiscuous mode [ 387.563706][ T9640] bond_slave_1: entered promiscuous mode [ 387.569430][ T9640] syz_tun: entered promiscuous mode [ 387.584789][ T9640] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 387.592281][ T9640] bond2: (slave macvlan3): speed changed to 0 on port 1 [ 387.616887][ T9640] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 387.973735][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 388.276260][ T9650] No such timeout policy "syz1" [ 388.369745][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 388.850503][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.866532][ T5885] usb 1-1: config 0 has no interface number 0 [ 388.872684][ T5885] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.890983][ T5885] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.902060][ T5885] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.916208][ T5885] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 388.925546][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.937415][ T5885] usb 1-1: config 0 descriptor?? [ 388.966218][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 389.034231][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.108053][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.160115][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 389.196601][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 389.233036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.266709][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1028'. [ 389.278531][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 389.307786][ T10] usb 2-1: config 0 descriptor?? [ 389.551716][ T9658] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 389.804325][ T9645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.926345][ T9660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.054035][ T10] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x7 [ 390.072834][ T10] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 390.112255][ T10] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 390.138344][ T10] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 390.166446][ T10] hid-picolcd 0003:04D8:C002.0010: unknown main item tag 0x0 [ 390.254035][ T10] hid-picolcd 0003:04D8:C002.0010: No report with id 0x11 found [ 390.306866][ T10] usb 2-1: USB disconnect, device number 15 [ 390.472627][ T5885] usbhid 1-1:0.1: can't add hid device: -71 [ 390.495796][ T5885] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 390.852860][ T5885] usb 1-1: USB disconnect, device number 28 [ 391.570463][ T9671] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 397.114584][ T9715] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 397.433101][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'. [ 397.443168][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 397.897230][ T9727] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 398.083901][ T123] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 398.286993][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 398.330090][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.374950][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.417932][ T123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 398.454759][ T123] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 398.478406][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.522653][ T123] usb 1-1: Product: syz [ 398.542861][ T123] usb 1-1: Manufacturer: syz [ 398.563396][ T123] usb 1-1: SerialNumber: syz [ 398.599372][ T123] usb 1-1: config 0 descriptor?? [ 398.852189][ T123] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 399.712918][ T6052] usb 1-1: USB disconnect, device number 29 [ 401.219108][ T9763] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 403.411323][ T9786] syzkaller0: entered promiscuous mode [ 403.426990][ T9786] syzkaller0: entered allmulticast mode [ 403.546089][ T9789] tipc: Enabled bearer , priority 0 [ 403.598453][ T9785] tipc: Resetting bearer [ 403.736036][ T9785] tipc: Disabling bearer [ 405.485190][ T9811] loop3: detected capacity change from 0 to 512 [ 405.497108][ T9811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.284542][ T9811] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 406.292510][ T9811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 406.304051][ T9811] System zones: 0-1, 15-15, 18-18, 34-34 [ 406.310060][ T9811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 406.450830][ T9811] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #16: comm syz.3.1070: inode has both inline data and extents flags [ 406.466030][ T9811] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1070: couldn't read orphan inode 16 (err -117) [ 406.467895][ T9816] bond2: option mode: unable to set because the bond device has slaves [ 406.490135][ T9811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 406.611702][ T9808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 406.788952][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.808005][ T9816] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 406.847987][ T9822] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 407.047661][ T9826] loop3: detected capacity change from 0 to 512 [ 407.110680][ T9826] EXT4-fs: Ignoring removed i_version option [ 407.138583][ T9826] EXT4-fs: Ignoring removed bh option [ 407.226332][ T9826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.412816][ T6052] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 407.476911][ T9826] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.616065][ T6052] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.806811][ T6052] usb 1-1: config 0 has no interface number 0 [ 408.078276][ T6052] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.099575][ T6052] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.121187][ T6052] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.178057][ T6052] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 408.226853][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.260245][ T6052] usb 1-1: config 0 descriptor?? [ 408.294054][ T6052] usb 1-1: can't set config #0, error -71 [ 408.331509][ T6052] usb 1-1: USB disconnect, device number 30 [ 408.804862][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.939827][ T9842] tipc: Enabled bearer , priority 0 [ 409.035893][ T9845] syzkaller0: entered promiscuous mode [ 409.041448][ T9845] syzkaller0: entered allmulticast mode [ 409.080108][ T9842] syzkaller0: entered promiscuous mode [ 409.088508][ T9842] syzkaller0: entered allmulticast mode [ 409.136833][ T9850] tipc: Resetting bearer [ 409.910594][ T9841] tipc: Resetting bearer [ 409.946742][ T9841] tipc: Disabling bearer [ 411.837763][ T123] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 411.879596][ T9871] loop0: detected capacity change from 0 to 2048 [ 411.908999][ T123] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.002347][ T9871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.174481][ T123] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 412.189976][ T9881] loop3: detected capacity change from 0 to 136 [ 412.385708][ T9877] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 413.008688][ T9876] fido_id[9876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 413.165534][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.277977][ T123] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 413.330352][ T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.383906][ T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.409777][ T123] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 413.585787][ T9892] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 414.333894][ T123] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 414.343065][ T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.366783][ T123] usb 3-1: config 0 descriptor?? [ 414.783977][ T8173] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 414.818451][ T9873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.925197][ T9873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.941812][ T123] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x7 [ 414.955738][ T8173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 414.984052][ T8173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 415.013986][ T8173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 415.045342][ T123] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0 [ 415.052785][ T123] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0 [ 415.077832][ T8173] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 415.107396][ T8173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.141683][ T8173] usb 1-1: Product: syz [ 415.153716][ T123] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0 [ 415.163595][ T123] hid-picolcd 0003:04D8:C002.0012: unknown main item tag 0x0 [ 415.174896][ T8173] usb 1-1: Manufacturer: syz [ 415.186293][ T8173] usb 1-1: SerialNumber: syz [ 415.219859][ T8173] usb 1-1: config 0 descriptor?? [ 415.458778][ T123] hid-picolcd 0003:04D8:C002.0012: No report with id 0x11 found [ 416.103072][ T123] usb 3-1: USB disconnect, device number 18 [ 416.112405][ T8173] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 416.125689][ T8173] usb 1-1: USB disconnect, device number 31 [ 420.958672][ T9920] syz.0.1094 (9920) used greatest stack depth: 17592 bytes left [ 421.223710][ T5885] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 421.399933][ T5885] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.434004][ T9385] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 421.457396][ T9927] loop0: detected capacity change from 0 to 2048 [ 421.560504][ T9927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.631816][ T9385] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 421.687583][ T9385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.705819][ T9385] usb 3-1: Product: syz [ 421.719145][ T9385] usb 3-1: Manufacturer: syz [ 421.732958][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.747799][ T9385] usb 3-1: SerialNumber: syz [ 421.778689][ T9385] usb 3-1: config 0 descriptor?? [ 421.800790][ T9385] hub 3-1:0.0: bad descriptor, ignoring hub [ 421.817210][ T9385] hub 3-1:0.0: probe with driver hub failed with error -5 [ 422.003952][ T9385] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 422.005976][ T9926] ------------[ cut here ]------------ [ 422.009772][ T9926] [ 422.009807][ T9926] ====================================================== [ 422.009836][ T9926] WARNING: possible circular locking dependency detected [ 422.009873][ T9926] syzkaller #0 Not tainted [ 422.009904][ T9926] ------------------------------------------------------ [ 422.009929][ T9926] syz.3.1095/9926 is trying to acquire lock: [ 422.009959][ T9926] ffffffff8e133180 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x321/0x5f0 [ 422.010120][ T9926] [ 422.010120][ T9926] but task is already holding lock: [ 422.010141][ T9926] ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 422.010236][ T9926] [ 422.010236][ T9926] which lock already depends on the new lock. [ 422.010236][ T9926] [ 422.010256][ T9926] [ 422.010256][ T9926] the existing dependency chain (in reverse order) is: [ 422.010270][ T9926] [ 422.010270][ T9926] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 422.010343][ T9926] _raw_spin_lock_nested+0x32/0x50 [ 422.010407][ T9926] raw_spin_rq_lock_nested+0x2a/0x140 [ 422.010457][ T9926] task_rq_lock+0xbc/0x470 [ 422.010503][ T9926] cgroup_move_task+0x92/0x2a0 [ 422.010558][ T9926] css_set_move_task+0x658/0x9e0 [ 422.010610][ T9926] cgroup_post_fork+0x1ef/0x7a0 [ 422.010653][ T9926] copy_process+0x3614/0x3950 [ 422.010714][ T9926] kernel_clone+0x21e/0x820 [ 422.010774][ T9926] user_mode_thread+0xdd/0x140 [ 422.010826][ T9926] rest_init+0x23/0x300 [ 422.010871][ T9926] start_kernel+0x3ac/0x400 [ 422.010926][ T9926] x86_64_start_reservations+0x24/0x30 [ 422.010998][ T9926] x86_64_start_kernel+0x143/0x1c0 [ 422.011062][ T9926] common_startup_64+0x13e/0x147 [ 422.011141][ T9926] [ 422.011141][ T9926] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 422.011226][ T9926] _raw_spin_lock_irqsave+0xa7/0xf0 [ 422.011281][ T9926] try_to_wake_up+0x67/0x12b0 [ 422.011349][ T9926] __wake_up_common_lock+0x137/0x1f0 [ 422.011413][ T9926] tty_port_default_wakeup+0xfb/0x170 [ 422.011483][ T9926] serial8250_tx_chars+0x72e/0x970 [ 422.011546][ T9926] serial8250_handle_irq+0x633/0xbb0 [ 422.011595][ T9926] serial8250_default_handle_irq+0xbf/0x200 [ 422.011664][ T9926] serial8250_interrupt+0x8d/0x180 [ 422.011735][ T9926] __handle_irq_event_percpu+0x285/0xa60 [ 422.011804][ T9926] handle_irq_event+0x8b/0x1e0 [ 422.011865][ T9926] handle_edge_irq+0x23b/0xa10 [ 422.011920][ T9926] __common_interrupt+0x141/0x1f0 [ 422.011990][ T9926] common_interrupt+0xb6/0xe0 [ 422.012038][ T9926] asm_common_interrupt+0x26/0x40 [ 422.012078][ T9926] finish_task_switch+0x242/0x940 [ 422.012100][ T9926] __schedule+0x1516/0x5070 [ 422.012117][ T9926] schedule+0x165/0x360 [ 422.012133][ T9926] schedule_hrtimeout_range_clock+0x1c5/0x2f0 [ 422.012150][ T9926] poll_schedule_timeout+0xd1/0x1b0 [ 422.012169][ T9926] do_sys_poll+0x73b/0x1070 [ 422.012187][ T9926] __se_sys_ppoll+0x1ff/0x260 [ 422.012203][ T9926] do_syscall_64+0xfa/0xf80 [ 422.012222][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.012236][ T9926] [ 422.012236][ T9926] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 422.012257][ T9926] _raw_spin_lock_irqsave+0xa7/0xf0 [ 422.012273][ T9926] __wake_up_common_lock+0x2f/0x1f0 [ 422.012294][ T9926] tty_port_default_wakeup+0xfb/0x170 [ 422.012312][ T9926] serial8250_tx_chars+0x72e/0x970 [ 422.012327][ T9926] serial8250_handle_irq+0x633/0xbb0 [ 422.012342][ T9926] serial8250_default_handle_irq+0xbf/0x200 [ 422.012360][ T9926] serial8250_interrupt+0x8d/0x180 [ 422.012383][ T9926] __handle_irq_event_percpu+0x285/0xa60 [ 422.012404][ T9926] handle_irq_event+0x8b/0x1e0 [ 422.012424][ T9926] handle_edge_irq+0x23b/0xa10 [ 422.012442][ T9926] __common_interrupt+0x141/0x1f0 [ 422.012462][ T9926] common_interrupt+0xb6/0xe0 [ 422.012475][ T9926] asm_common_interrupt+0x26/0x40 [ 422.012489][ T9926] pv_native_safe_halt+0x13/0x20 [ 422.012507][ T9926] default_idle+0x13/0x20 [ 422.012519][ T9926] default_idle_call+0x73/0xb0 [ 422.012531][ T9926] do_idle+0x1ea/0x520 [ 422.012546][ T9926] cpu_startup_entry+0x44/0x60 [ 422.012562][ T9926] rest_init+0x2de/0x300 [ 422.012574][ T9926] start_kernel+0x3ac/0x400 [ 422.012589][ T9926] x86_64_start_reservations+0x24/0x30 [ 422.012609][ T9926] x86_64_start_kernel+0x143/0x1c0 [ 422.012629][ T9926] common_startup_64+0x13e/0x147 [ 422.012646][ T9926] [ 422.012646][ T9926] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 422.012670][ T9926] _raw_spin_lock_irqsave+0xa7/0xf0 [ 422.012687][ T9926] serial8250_console_write+0x17e/0x1ba0 [ 422.012705][ T9926] console_flush_all+0x745/0xb60 [ 422.012725][ T9926] console_unlock+0xbb/0x190 [ 422.012743][ T9926] vprintk_emit+0x4f8/0x5f0 [ 422.012761][ T9926] _printk+0xcf/0x120 [ 422.012781][ T9926] register_console+0xa8b/0xf90 [ 422.012801][ T9926] univ8250_console_init+0x3a/0x70 [ 422.012823][ T9926] console_init+0xfc/0x3f0 [ 422.012842][ T9926] start_kernel+0x252/0x400 [ 422.012856][ T9926] x86_64_start_reservations+0x24/0x30 [ 422.012877][ T9926] x86_64_start_kernel+0x143/0x1c0 [ 422.012896][ T9926] common_startup_64+0x13e/0x147 [ 422.012916][ T9926] [ 422.012916][ T9926] -> #0 (console_owner){-.-.}-{0:0}: [ 422.012935][ T9926] __lock_acquire+0x15a6/0x2cf0 [ 422.012949][ T9926] lock_acquire+0x117/0x340 [ 422.012962][ T9926] vprintk_emit+0x33d/0x5f0 [ 422.012979][ T9926] _printk+0xcf/0x120 [ 422.012998][ T9926] __report_bug+0x305/0x500 [ 422.013016][ T9926] report_bug+0x16a/0x220 [ 422.013033][ T9926] handle_bug+0x98/0x200 [ 422.013044][ T9926] exc_invalid_op+0x1a/0x50 [ 422.013056][ T9926] asm_exc_invalid_op+0x1a/0x20 [ 422.013069][ T9926] sched_change_end+0x4f6/0x640 [ 422.013086][ T9926] rt_mutex_setprio+0x488/0xb70 [ 422.013099][ T9926] remove_waiter+0x7f5/0xaf0 [ 422.013113][ T9926] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 422.013128][ T9926] futex_wait_requeue_pi+0x481/0x850 [ 422.013147][ T9926] do_futex+0x181/0x420 [ 422.013161][ T9926] __se_sys_futex+0x36f/0x400 [ 422.013176][ T9926] do_syscall_64+0xfa/0xf80 [ 422.013196][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.013209][ T9926] [ 422.013209][ T9926] other info that might help us debug this: [ 422.013209][ T9926] [ 422.013214][ T9926] Chain exists of: [ 422.013214][ T9926] console_owner --> &p->pi_lock --> &rq->__lock [ 422.013214][ T9926] [ 422.013238][ T9926] Possible unsafe locking scenario: [ 422.013238][ T9926] [ 422.013243][ T9926] CPU0 CPU1 [ 422.013247][ T9926] ---- ---- [ 422.013252][ T9926] lock(&rq->__lock); [ 422.013261][ T9926] lock(&p->pi_lock); [ 422.013272][ T9926] lock(&rq->__lock); [ 422.013282][ T9926] lock(console_owner); [ 422.013292][ T9926] [ 422.013292][ T9926] *** DEADLOCK *** [ 422.013292][ T9926] [ 422.013296][ T9926] 3 locks held by syz.3.1095/9926: [ 422.013305][ T9926] #0: ffff88807648ab28 (&pi_futex_key){....}-{2:2}, at: rt_mutex_cleanup_proxy_lock+0x23/0x100 [ 422.013342][ T9926] #1: ffff888079a10a68 (&p->pi_lock){-.-.}-{2:2}, at: remove_waiter+0x286/0xaf0 [ 422.013376][ T9926] #2: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 422.013411][ T9926] [ 422.013411][ T9926] stack backtrace: [ 422.013430][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 422.013448][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.013465][ T9926] Call Trace: [ 422.013472][ T9926] [ 422.013478][ T9926] dump_stack_lvl+0x189/0x250 [ 422.013500][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.013519][ T9926] ? __pfx__printk+0x10/0x10 [ 422.013542][ T9926] ? print_lock_name+0xde/0x100 [ 422.013567][ T9926] print_circular_bug+0x2e2/0x300 [ 422.013588][ T9926] check_noncircular+0x12e/0x150 [ 422.013611][ T9926] __lock_acquire+0x15a6/0x2cf0 [ 422.013637][ T9926] ? vprintk_emit+0x321/0x5f0 [ 422.013654][ T9926] lock_acquire+0x117/0x340 [ 422.013674][ T9926] ? vprintk_emit+0x321/0x5f0 [ 422.013696][ T9926] ? do_raw_spin_unlock+0x122/0x240 [ 422.013717][ T9926] ? vprintk_emit+0x321/0x5f0 [ 422.013737][ T9926] vprintk_emit+0x33d/0x5f0 [ 422.013755][ T9926] ? vprintk_emit+0x321/0x5f0 [ 422.013775][ T9926] ? __pfx_vprintk_emit+0x10/0x10 [ 422.013797][ T9926] ? try_get_folio+0xec/0x660 [ 422.013824][ T9926] _printk+0xcf/0x120 [ 422.013848][ T9926] ? __pfx__printk+0x10/0x10 [ 422.013871][ T9926] ? find_bug+0xa5/0x370 [ 422.013888][ T9926] ? sched_change_end+0x4f6/0x640 [ 422.013906][ T9926] ? rcu_is_watching+0x15/0xb0 [ 422.013929][ T9926] ? sched_change_end+0x4f6/0x640 [ 422.013951][ T9926] __report_bug+0x305/0x500 [ 422.013974][ T9926] ? sched_change_end+0x4f6/0x640 [ 422.014002][ T9926] ? __pfx___report_bug+0x10/0x10 [ 422.014020][ T9926] ? rcu_read_lock_sched_held+0x89/0x100 [ 422.014039][ T9926] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 422.014061][ T9926] ? sched_change_end+0x4f6/0x640 [ 422.014077][ T9926] report_bug+0x16a/0x220 [ 422.014095][ T9926] ? sched_change_end+0x4f6/0x640 [ 422.014112][ T9926] ? sched_change_end+0x4f8/0x640 [ 422.014128][ T9926] handle_bug+0x98/0x200 [ 422.014159][ T9926] exc_invalid_op+0x1a/0x50 [ 422.014172][ T9926] asm_exc_invalid_op+0x1a/0x20 [ 422.014188][ T9926] RIP: 0010:sched_change_end+0x4f6/0x640 [ 422.014207][ T9926] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 422.014221][ T9926] RSP: 0018:ffffc9000260f850 EFLAGS: 00010046 [ 422.014233][ T9926] RAX: 1ffff1100f342000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 422.014244][ T9926] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888079a10000 [ 422.014254][ T9926] RBP: ffff888079a102a8 R08: ffff888079a10007 R09: 1ffff1100f342000 [ 422.014265][ T9926] R10: dffffc0000000000 R11: ffffed100f342001 R12: dffffc0000000000 [ 422.014276][ T9926] R13: ffff888079a10000 R14: ffff8880b863ab00 R15: ffff888079a10000 [ 422.014290][ T9926] ? sched_change_end+0x4af/0x640 [ 422.014314][ T9926] rt_mutex_setprio+0x488/0xb70 [ 422.014337][ T9926] remove_waiter+0x7f5/0xaf0 [ 422.014355][ T9926] ? lockdep_hardirqs_on+0x98/0x140 [ 422.014376][ T9926] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 422.014393][ T9926] futex_wait_requeue_pi+0x481/0x850 [ 422.014415][ T9926] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 422.014437][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 422.014466][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 422.014492][ T9926] do_futex+0x181/0x420 [ 422.014509][ T9926] ? __pfx_do_futex+0x10/0x10 [ 422.014525][ T9926] ? do_timer_settime+0x4b1/0x4c0 [ 422.014546][ T9926] __se_sys_futex+0x36f/0x400 [ 422.014565][ T9926] ? __pfx___se_sys_futex+0x10/0x10 [ 422.014583][ T9926] ? __x64_sys_futex+0x21/0xf0 [ 422.014600][ T9926] do_syscall_64+0xfa/0xf80 [ 422.014620][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.014634][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 422.014650][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.014670][ T9926] RIP: 0033:0x7feb2ad8f749 [ 422.014683][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.014695][ T9926] RSP: 002b:00007feb2bc6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 422.014709][ T9926] RAX: ffffffffffffffda RBX: 00007feb2afe5fa0 RCX: 00007feb2ad8f749 [ 422.014720][ T9926] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 422.014730][ T9926] RBP: 00007feb2ae13f91 R08: 0000200000048000 R09: 0000000000000000 [ 422.014740][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.014748][ T9926] R13: 00007feb2afe6038 R14: 00007feb2afe5fa0 R15: 00007ffc21ce08f8 [ 422.014766][ T9926] [ 423.169770][ T9926] WARNING: kernel/sched/core.c:10852 at sched_change_end+0x4f6/0x640, CPU#1: syz.3.1095/9926 [ 423.179958][ T9926] Modules linked in: [ 423.183846][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 423.193118][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.203163][ T9926] RIP: 0010:sched_change_end+0x4f6/0x640 [ 423.208813][ T9926] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 423.228406][ T9926] RSP: 0018:ffffc9000260f850 EFLAGS: 00010046 [ 423.234462][ T9926] RAX: 1ffff1100f342000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 423.242423][ T9926] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888079a10000 [ 423.250382][ T9926] RBP: ffff888079a102a8 R08: ffff888079a10007 R09: 1ffff1100f342000 [ 423.258348][ T9926] R10: dffffc0000000000 R11: ffffed100f342001 R12: dffffc0000000000 [ 423.266309][ T9926] R13: ffff888079a10000 R14: ffff8880b863ab00 R15: ffff888079a10000 [ 423.274293][ T9926] FS: 00007feb2bc6f6c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 423.283304][ T9926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.289890][ T9926] CR2: 0000200000024030 CR3: 000000007768e000 CR4: 00000000003526f0 [ 423.297869][ T9926] Call Trace: [ 423.301142][ T9926] [ 423.304090][ T9926] rt_mutex_setprio+0x488/0xb70 [ 423.308971][ T9926] remove_waiter+0x7f5/0xaf0 [ 423.313553][ T9926] ? lockdep_hardirqs_on+0x98/0x140 [ 423.318778][ T9926] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 423.324507][ T9926] futex_wait_requeue_pi+0x481/0x850 [ 423.329802][ T9926] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 423.335608][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 423.340914][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 423.346205][ T9926] do_futex+0x181/0x420 [ 423.350362][ T9926] ? __pfx_do_futex+0x10/0x10 [ 423.355031][ T9926] ? do_timer_settime+0x4b1/0x4c0 [ 423.360135][ T9926] __se_sys_futex+0x36f/0x400 [ 423.364805][ T9926] ? __pfx___se_sys_futex+0x10/0x10 [ 423.369998][ T9926] ? __x64_sys_futex+0x21/0xf0 [ 423.374756][ T9926] do_syscall_64+0xfa/0xf80 [ 423.379248][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.385299][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 423.389974][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.395858][ T9926] RIP: 0033:0x7feb2ad8f749 [ 423.400260][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.419885][ T9926] RSP: 002b:00007feb2bc6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 423.428285][ T9926] RAX: ffffffffffffffda RBX: 00007feb2afe5fa0 RCX: 00007feb2ad8f749 [ 423.436246][ T9926] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 423.444227][ T9926] RBP: 00007feb2ae13f91 R08: 0000200000048000 R09: 0000000000000000 [ 423.452193][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.460182][ T9926] R13: 00007feb2afe6038 R14: 00007feb2afe5fa0 R15: 00007ffc21ce08f8 [ 423.468164][ T9926] [ 423.471199][ T9926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.478478][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 423.487753][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.497799][ T9926] Call Trace: [ 423.501071][ T9926] [ 423.503990][ T9926] dump_stack_lvl+0x99/0x250 [ 423.508574][ T9926] ? __asan_memcpy+0x40/0x70 [ 423.513154][ T9926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.518349][ T9926] ? __pfx__printk+0x10/0x10 [ 423.522937][ T9926] vpanic+0x237/0x6d0 [ 423.526910][ T9926] ? __pfx_vpanic+0x10/0x10 [ 423.531426][ T9926] ? is_bpf_text_address+0x292/0x2b0 [ 423.536699][ T9926] ? is_bpf_text_address+0x26/0x2b0 [ 423.541897][ T9926] panic+0xb9/0xc0 [ 423.545612][ T9926] ? __pfx_panic+0x10/0x10 [ 423.550024][ T9926] __warn+0x317/0x4b0 [ 423.554013][ T9926] ? sched_change_end+0x4f6/0x640 [ 423.559041][ T9926] ? sched_change_end+0x4f6/0x640 [ 423.564055][ T9926] __report_bug+0x288/0x500 [ 423.568558][ T9926] ? sched_change_end+0x4f6/0x640 [ 423.573605][ T9926] ? __pfx___report_bug+0x10/0x10 [ 423.578628][ T9926] ? rcu_read_lock_sched_held+0x89/0x100 [ 423.584255][ T9926] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 423.590321][ T9926] ? sched_change_end+0x4f6/0x640 [ 423.595338][ T9926] report_bug+0x16a/0x220 [ 423.599662][ T9926] ? sched_change_end+0x4f6/0x640 [ 423.604688][ T9926] ? sched_change_end+0x4f8/0x640 [ 423.609711][ T9926] handle_bug+0x98/0x200 [ 423.613939][ T9926] exc_invalid_op+0x1a/0x50 [ 423.618429][ T9926] asm_exc_invalid_op+0x1a/0x20 [ 423.623271][ T9926] RIP: 0010:sched_change_end+0x4f6/0x640 [ 423.628896][ T9926] Code: 00 74 26 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 1d fc ff ff 90 0f 0b 90 e9 86 fc ff ff 90 <0f> 0b 90 eb d4 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 fb ff ff 48 [ 423.648514][ T9926] RSP: 0018:ffffc9000260f850 EFLAGS: 00010046 [ 423.654585][ T9926] RAX: 1ffff1100f342000 RBX: ffffffff8dba8ed0 RCX: ffffffff8192e20f [ 423.662576][ T9926] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888079a10000 [ 423.670549][ T9926] RBP: ffff888079a102a8 R08: ffff888079a10007 R09: 1ffff1100f342000 [ 423.678523][ T9926] R10: dffffc0000000000 R11: ffffed100f342001 R12: dffffc0000000000 [ 423.686501][ T9926] R13: ffff888079a10000 R14: ffff8880b863ab00 R15: ffff888079a10000 [ 423.694755][ T9926] ? sched_change_end+0x4af/0x640 [ 423.699791][ T9926] rt_mutex_setprio+0x488/0xb70 [ 423.704655][ T9926] remove_waiter+0x7f5/0xaf0 [ 423.709244][ T9926] ? lockdep_hardirqs_on+0x98/0x140 [ 423.714446][ T9926] rt_mutex_cleanup_proxy_lock+0x6c/0x100 [ 423.720160][ T9926] futex_wait_requeue_pi+0x481/0x850 [ 423.725460][ T9926] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 423.731286][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 423.736594][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 423.741895][ T9926] do_futex+0x181/0x420 [ 423.746055][ T9926] ? __pfx_do_futex+0x10/0x10 [ 423.750735][ T9926] ? do_timer_settime+0x4b1/0x4c0 [ 423.755761][ T9926] __se_sys_futex+0x36f/0x400 [ 423.760434][ T9926] ? __pfx___se_sys_futex+0x10/0x10 [ 423.765648][ T9926] ? __x64_sys_futex+0x21/0xf0 [ 423.770407][ T9926] do_syscall_64+0xfa/0xf80 [ 423.774915][ T9926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.780968][ T9926] ? clear_bhb_loop+0x60/0xb0 [ 423.785723][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.791607][ T9926] RIP: 0033:0x7feb2ad8f749 [ 423.796017][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.815636][ T9926] RSP: 002b:00007feb2bc6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 423.824044][ T9926] RAX: ffffffffffffffda RBX: 00007feb2afe5fa0 RCX: 00007feb2ad8f749 [ 423.832006][ T9926] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 423.839967][ T9926] RBP: 00007feb2ae13f91 R08: 0000200000048000 R09: 0000000000000000 [ 423.847923][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.855889][ T9926] R13: 00007feb2afe6038 R14: 00007feb2afe5fa0 R15: 00007ffc21ce08f8 [ 423.863868][ T9926] [ 425.022157][ T9926] Shutting down cpus with NMI [ 425.027501][ T9926] Kernel Offset: disabled [ 425.031829][ T9926] Rebooting in 86400 seconds..