last executing test programs: 26m6.453521214s ago: executing program 0 (id=2141): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x13, 0x6b39, 0x10, 0x11e, 0x9, 0x5, 0xbe, 0x8, 0x8, 0x1, 0x7, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 26m3.590461084s ago: executing program 2 (id=2147): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r2}) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="42cc", 0x2}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r6, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) 26m0.957166702s ago: executing program 2 (id=2150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0x9) sendmmsg$alg(r3, &(0x7f0000006500)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000b40)=""/238, 0xee}], 0x3}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r8, 0x0) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0xb3d7, 0x20, 0x3, 0x14b, 0x0, r8}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x2f6, 0x1100, 0x40, 0x0, 0x2, 0xff7fffff, 0x0, 0x0, 0x40}}, 0x38) 26m0.868657063s ago: executing program 0 (id=2151): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$kcm(0x2, 0xb, 0x2) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 26m0.858335813s ago: executing program 3 (id=2152): writev(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 26m0.778218194s ago: executing program 1 (id=2153): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x7ef) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000180)) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) 26m0.425426916s ago: executing program 2 (id=2154): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xd50, 0x4) 26m0.020167159s ago: executing program 1 (id=2155): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x31, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 25m59.564351752s ago: executing program 1 (id=2156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xdd47, 0x6f7e, 0x8, 0x80, 0x400, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x6, 0x7, 0x41b, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 25m59.129909815s ago: executing program 0 (id=2157): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 25m59.046652616s ago: executing program 3 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x29, 0x6, 0x0, {0x1, 0x200000000000, 0x0, 0x2, '', 0x8}}, 0x29) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="b00000000000000001000000000000000300000000200000000000000000000000000000000000000600000000000000000000006909000000000000000000000000000000000000000000000000000002000000000000000e0000000000000000000000100000000000000000000000020000000040000000002000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff1f000000000000000000000300000000000000000000000000000001"], 0x0, 0x0, 0x0}) 25m58.755378658s ago: executing program 2 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x3d08009, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0x3, 0xf, 0x0, 0x6, 0x6, 0x2}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x400) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r5}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x80) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r6 = dup2(r2, r1) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x54) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x3}) 25m58.754153138s ago: executing program 3 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 25m58.164200702s ago: executing program 0 (id=2161): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000000000000000000000d254e86ab8862db32a000000002df51900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3156}, @ldst={0x2, 0x3, 0x2, 0x8, 0x6, 0xffffffffffffffff, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x1, 0x6, 0x0, 0x7, 0xffffffffffffffc0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x1) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441", 0x39) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000f3ae993a8d000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 25m58.098250873s ago: executing program 1 (id=2162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000100)=0x9) sendmmsg$alg(r3, &(0x7f0000006500)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000b40)=""/238, 0xee}], 0x3}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r8, 0x0) syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0xb3d7, 0x20, 0x3, 0x14b, 0x0, r8}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x2f6, 0x1100, 0x40, 0x0, 0x2, 0xff7fffff, 0x0, 0x0, 0x40}}, 0x38) 25m58.097808963s ago: executing program 3 (id=2163): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000007fb1c0175d653e08"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 25m58.036234633s ago: executing program 2 (id=2164): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x31, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 25m55.898657278s ago: executing program 3 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$PROG_LOAD(0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000001300)=@multiplanar_fd={0x400, 0xb, 0x4, 0x20, 0x2, {0x77359400}, {0x3, 0x0, 0x9, 0xfa, 0x6, 0x7, "ac8bd845"}, 0x4, 0x4, {&(0x7f0000001400)=[{0x1000, 0x3, {}, 0x9}, {0x7, 0x5, {}, 0x9}]}, 0x4}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES16, @ANYRES16=r2, @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x80000001, 0x0, 0xf, 0x80000005}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x10, 0x4, &(0x7f0000001200)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', r4, @fallback=0x21}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5fa70bd7000ffffff", @ANYRES32, @ANYBLOB="200001", @ANYBLOB], 0x38}}, 0x40084c0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 25m55.868601548s ago: executing program 0 (id=2166): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vim2m(0x0, 0xca0, 0x2) r0 = syz_open_procfs(0x0, 0x0) read$msr(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 25m55.776252898s ago: executing program 2 (id=2167): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$kcm(0x2, 0xb, 0x2) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 25m54.11978568s ago: executing program 1 (id=2168): mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3018, 0x1}) 25m54.0831106s ago: executing program 0 (id=2169): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 25m53.138584557s ago: executing program 1 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xdd47, 0x6f7e, 0x8, 0x80, 0x400, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x6, 0x7, 0x41b, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 25m53.133493257s ago: executing program 3 (id=2171): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 24m50.511680582s ago: executing program 32 (id=2169): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 24m49.826948066s ago: executing program 33 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xdd47, 0x6f7e, 0x8, 0x80, 0x400, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x6, 0x7, 0x41b, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 24m49.152898141s ago: executing program 34 (id=2167): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x6, 0xffff}, {0xfff3, 0xfff3}}}, 0x24}}, 0x880) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) socket$kcm(0x2, 0xb, 0x2) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) 24m48.831250133s ago: executing program 35 (id=2171): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 7.908907375s ago: executing program 7 (id=5591): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) 7.881925365s ago: executing program 6 (id=5592): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 6.992194241s ago: executing program 5 (id=5595): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12015df9826a9903dce24830c2acb6010203010902120001000000000904000000f2a7cc"], 0x0) 6.900236672s ago: executing program 6 (id=5596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6.389091336s ago: executing program 6 (id=5597): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 6.282518736s ago: executing program 4 (id=5598): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r3 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r3, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 6.149027947s ago: executing program 4 (id=5599): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) 6.023476828s ago: executing program 4 (id=5600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 5.110549664s ago: executing program 4 (id=5601): openat$tun(0xffffffffffffff9c, 0x0, 0x24981, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x30, &(0x7f0000000600)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0xfffffc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e27, 0x6adcc8a4, @empty, 0xfffffff8}, @in6={0xa, 0x4e21, 0x10, @mcast2, 0x503ccbec}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={r5, 0x8}, &(0x7f0000000540)=0x8) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_io_uring_setup(0x344f, 0x0, &(0x7f0000000640), &(0x7f0000000680)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, 0x0, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000040), 0x0, 0x300}) 4.772381507s ago: executing program 6 (id=5602): socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000044000)) r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x100) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0) 4.718878777s ago: executing program 7 (id=5603): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) 4.108700852s ago: executing program 7 (id=5604): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 3.979314322s ago: executing program 5 (id=5605): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0xa, 0x201, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) rename(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='./file0\x00') 3.736692084s ago: executing program 6 (id=5606): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000240)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e7d448290a75456650c421ff8a3091b1c189", 0x2d}, {0x0, 0xfe10}], 0x2}}], 0x1, 0xc0000) 2.75568274s ago: executing program 5 (id=5607): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r3 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r3, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 2.490383673s ago: executing program 5 (id=5608): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) 2.188701045s ago: executing program 5 (id=5609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 1.860337547s ago: executing program 4 (id=5610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="7a0a00ff00000000711061000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.708214818s ago: executing program 4 (id=5611): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) 1.666275688s ago: executing program 7 (id=5612): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) 884.225504ms ago: executing program 7 (id=5613): r0 = socket(0xa, 0x5, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38}, 0x24000052) 841.452724ms ago: executing program 5 (id=5614): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12015df9826a9903dce24830c2acb6010203010902120001000000000904000000f2a7cc"], 0x0) 274.521148ms ago: executing program 6 (id=5615): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) r2 = socket(0x18, 0x0, 0x1) r3 = socket(0x2b, 0xa, 0x1) connect$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x80, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}]}]}, 0x80}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="772cdb1454e96363ab095e6c8a6457a859646193010a24b50364a68319f695d07f50a1aa0b1914dce43c759f45011e9074d86139a3f7788efebb944f4f07c08c7dffb75ed288bf55b5ed61ba628086656c86502ec7de6d963182ad14142d8a4464ae41a8ff8640a437de15b36f7fed34d3998b0b91a6c860bb515d63398b97d208672d50cea387f2e09b000047f6fceef0a4c63cc4ab7801a4305533e340bbddaa791dcf1597a3f3ed476e7d74897baaa915d16c1e6d6ecf04", 0xb9}, {&(0x7f0000000440)}, {&(0x7f00000001c0)="1af14ca7167e58888d71d2b23944324440a7a0fa3c19611d747e71d4b8b46578e6a9e7a765b2b481b292ba49277dba179151e82c96ab5d015bac1ea45fb49d909ed4b836133afc3cb17f1344485eb22821794ab7b6d2768a757802d7612374d4", 0x60}, {&(0x7f0000000100)="7fe704ddb0533076288080de5031eb45de301bca47dc49984a506217246bd9dee61020d6198e1a1247438d3647bb", 0x2e}, {&(0x7f0000000540)="f37dd9c0802c6e71f5099c847ee07b6075a80dd734b970718a541202288ca8b998399c1c1346a8c1f9fc9e70fb18cb11b307092207e64b32bf47658ea05283374c4641f4f245cc8071055455daae7afabdb267b5e8ce1ddc145d8211f55061eadb2dcd4f8cd4ade19df1bb7d9eb3d6b8fb96229c20b16af90d", 0x79}, {0x0}, {&(0x7f0000000680)="f31dbe714a7223f28ed43ef1d0e91f", 0xf}], 0x7, &(0x7f0000000740)=[{0xa0, 0x1, 0x9, "7a03605f36a909dccb29330c069f54710dc411a5c55e8c9e15766815bff6a6b916abaf2f248f991b050dd32fb5c9a5b02ce753227e7b2f1a0d7ad8fc0f360055bab37e6b67184be095ceaef9e76ff9d1ac5dcf42907d9cc774af19002318d8c419a1e539c130ac343af80b87da33406fb6c7f102020c0494c3b04962177b9ee377aa90f576c8907c20eb40"}, {0x80, 0x1, 0x9df, "3a59c962ad6107c5ecbb380edb2f3d7e3a73eff36c64c6ab13b467101250242c594044f250114d89a199560aa86d05df4bb19b256f288255d27c070853475b3ccb6e07a621a3f83ba9d1603de5f4dbae3719d8f786b33a8f5ef3be8037739e9cc27c5e69d0bff00839ac33b7fec5"}, {0x88, 0x103, 0x555b, "a679363f2486d7962c4cb59a50903d05239f1e0dca84e75e1e5b7b259a910b25d83267ced5767e5e84c8cccd3dd5a0eb5c1b974261b63bd1f8aea7fc6d85c53173703a53c7e0006d414dfd99242f951c89d2718e0d412f8a06776db272949ba3eb28e5940258d520e45d4536c017b1cc30cf"}, {0x78, 0x10b, 0x3, "8b8b9865b12d8be54db30a4c718a8e96f13b4b12fd6ddd82f0c25601b9112818187ac566500c344962df35c4bbd6c5cd61fe72acf4f75a111a53bb5636968fec3c0fc373ffd32311eb2f8bc9ade1529fa23f7c410e6433de4f4cc91b3502e3f5db15ea"}, {0x70, 0x10b, 0x7, "3c24de91ea4d3b8df88736c5595705dd409ff6eb204d7330155a2da7c61e0b39ba6812061bba232bfc13f1a818dd7f0df8b6140e6dfd6e70ef8e8bb394d0091ab3a4a1ff4296a3b241f9680d33c2b99cb65c8815dd7761fc23c3d6"}, {0x100, 0x1f5, 0x3, "070d96be0a5e36d55b7a167087057656ef81ad31835d22c3c0328543eba1d6878ae9890d721d133a30485fe9690b406ea11d5429b4f114b9caa3d678fa80db85ccbcacdcf8cf5ad1266ed81386ac86dea5089a1a1b5bf762d94827f9a14918bb24951fa57b82c7c8d06d03066fa540bc2996f29ecde0268462049f4094eb13a388ba902ff8494185fc82a8ea7b682e968bb0538e07f13bf2d10b52698118a5758deecf5c2810a334f1e20f7a95ce3c7987d7a7e1a77696aa9f58262dbee2b1809dcf4973ddb5c170664e77f6ef9a04ba134c101929de58f3f90248aba68ac8851267cf5f670d7124d873e13265"}, {0x98, 0x116, 0xf, "db30aacccddc04dbff2aaedf291e408c7411bb718d53911953c2300f9b9c3bf8fa99233b0bedd4754bfcd2cb1568479bf29953196220340c53b5574b47beff964bdfa24b2047126650c551963ab6462c3bde2940db8049c719b946002865765af9df6720c8dc11e41d764d8daff69a4e022dbbfbf91e389f81db5665933493f99fc8946fe037"}, {0x20, 0x111, 0x7, "fb6a516d20d06156920601b986df32c1"}], 0x448}, 0x4000) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x8) socket(0x10, 0x80000, 0x1000000) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x8000a, 0x10, 0x3ffffffe, 0x1}) 0s ago: executing program 7 (id=5616): r0 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@generic={0x8, 0x2, 0x3, 0x64, 0x7f}]}, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) connect$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x4) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2a000000060000000000000000005bb500129f4e2173830002"], 0x2a) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x84, &(0x7f0000000040)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) kernel console output (not intermixed with test programs): 13 [ 2074.662994][T24524] binder: BINDER_SET_CONTEXT_MGR already set [ 2074.678160][T24524] binder: 24523:24524 ioctl 4018620d 200000004a80 returned -16 [ 2074.722400][T20008] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2074.747543][T20008] pwc: recv_control_msg error -32 req 02 val 2700 [ 2074.778514][T20008] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2074.808396][T20008] pwc: recv_control_msg error -32 req 04 val 1000 [ 2074.824914][T20008] pwc: recv_control_msg error -32 req 04 val 1300 [ 2074.834983][T20008] pwc: recv_control_msg error -32 req 04 val 1400 [ 2074.854423][T20008] pwc: recv_control_msg error -32 req 02 val 2000 [ 2074.876849][T20008] pwc: recv_control_msg error -32 req 02 val 2100 [ 2075.110134][T20008] pwc: recv_control_msg error -71 req 02 val 2500 [ 2075.131432][T20008] pwc: recv_control_msg error -71 req 02 val 2400 [ 2075.138742][T20008] pwc: recv_control_msg error -71 req 02 val 2600 [ 2075.157979][T20008] pwc: recv_control_msg error -71 req 02 val 2900 [ 2075.217028][T20008] pwc: recv_control_msg error -71 req 02 val 2800 [ 2075.244159][T20008] pwc: recv_control_msg error -71 req 04 val 1100 [ 2075.267863][T20008] pwc: recv_control_msg error -71 req 04 val 1200 [ 2075.306035][T20008] pwc: Registered as video103. [ 2075.403110][T20008] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input89 [ 2075.527933][T20008] usb 7-1: USB disconnect, device number 3 [ 2076.170063][T24547] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4897'. [ 2076.830434][T24551] blktrace: Concurrent blktraces are not allowed on loop12 [ 2079.063444][T20008] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2079.386149][T20008] usb 5-1: Using ep0 maxpacket: 32 [ 2079.451179][T20008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.497522][T20008] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2079.552860][T20008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.593824][T20008] usb 5-1: config 0 descriptor?? [ 2079.761191][T24570] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4906'. [ 2080.773717][T20008] cypress 0003:04B4:DE61.0046: item fetching failed at offset 0/2 [ 2080.786690][T20008] cypress 0003:04B4:DE61.0046: parse failed [ 2080.823501][T20008] cypress: probe of 0003:04B4:DE61.0046 failed with error -22 [ 2081.201517][T24591] block device autoloading is deprecated and will be removed. [ 2081.219866][T24592] blktrace: Concurrent blktraces are not allowed on loop10 [ 2082.455585][T16100] null_blk: rq ffff888022608000 timed out [ 2082.461704][T16100] blk_print_req_error: 53 callbacks suppressed [ 2082.461715][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.481107][T16100] null_blk: rq ffff888022608180 timed out [ 2082.487489][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.498150][T16100] null_blk: rq ffff888022608300 timed out [ 2082.504558][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.516185][T16100] null_blk: rq ffff888022608480 timed out [ 2082.522030][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.533011][T16100] null_blk: rq ffff888022608600 timed out [ 2082.538961][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.549876][T16100] null_blk: rq ffff888022608780 timed out [ 2082.555730][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.566850][T16100] null_blk: rq ffff888022608900 timed out [ 2082.572899][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.585230][T16100] null_blk: rq ffff888022608a80 timed out [ 2082.591037][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.602647][T16100] null_blk: rq ffff888022608c00 timed out [ 2082.608748][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.619648][T16100] null_blk: rq ffff888022608d80 timed out [ 2082.625474][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2082.636473][T16100] null_blk: rq ffff888022608f00 timed out [ 2082.642301][T16100] null_blk: rq ffff888022609080 timed out [ 2082.650420][T16100] null_blk: rq ffff888022609200 timed out [ 2082.656273][T16100] null_blk: rq ffff888022609380 timed out [ 2082.662194][T16100] null_blk: rq ffff888022609500 timed out [ 2082.668047][T16100] null_blk: rq ffff888022609680 timed out [ 2082.674509][T16100] null_blk: rq ffff888022609800 timed out [ 2082.680383][T16100] null_blk: rq ffff888022609980 timed out [ 2082.687236][T16100] null_blk: rq ffff888022609b00 timed out [ 2082.693119][T16100] null_blk: rq ffff888022609c80 timed out [ 2082.699058][T16100] null_blk: rq ffff888022609e00 timed out [ 2082.704942][T16100] null_blk: rq ffff888022609f80 timed out [ 2082.710810][T16100] null_blk: rq ffff88802260a100 timed out [ 2082.716786][T16100] null_blk: rq ffff88802260a280 timed out [ 2082.723688][T16100] null_blk: rq ffff88802260a400 timed out [ 2082.729657][T16100] null_blk: rq ffff88802260a580 timed out [ 2082.736347][T16100] null_blk: rq ffff88802260a700 timed out [ 2082.743714][T16100] null_blk: rq ffff88802260a880 timed out [ 2082.749597][T16100] null_blk: rq ffff88802260aa00 timed out [ 2082.755452][T16100] null_blk: rq ffff88802260ab80 timed out [ 2082.761329][T16100] null_blk: rq ffff88802260ad00 timed out [ 2082.767665][T16100] null_blk: rq ffff88802260ae80 timed out [ 2082.774585][T16100] null_blk: rq ffff88802260b000 timed out [ 2082.780446][T16100] null_blk: rq ffff88802260b180 timed out [ 2082.787279][T16100] null_blk: rq ffff88802260b300 timed out [ 2082.793314][T16100] null_blk: rq ffff88802260b480 timed out [ 2082.799156][T16100] null_blk: rq ffff88802260b600 timed out [ 2082.805034][T16100] null_blk: rq ffff88802260b780 timed out [ 2082.811055][T16100] null_blk: rq ffff88802260b900 timed out [ 2082.816988][T16100] null_blk: rq ffff88802260ba80 timed out [ 2082.823232][T16100] null_blk: rq ffff88802260bc00 timed out [ 2082.829115][T16100] null_blk: rq ffff88802260bd80 timed out [ 2082.835167][T16100] null_blk: rq ffff88802260bf00 timed out [ 2082.841040][T16100] null_blk: rq ffff88802260c080 timed out [ 2082.847278][T16100] null_blk: rq ffff88802260c200 timed out [ 2082.853320][T16100] null_blk: rq ffff88802260c380 timed out [ 2082.859355][T16100] null_blk: rq ffff88802260c500 timed out [ 2082.865304][T16100] null_blk: rq ffff88802260c680 timed out [ 2082.871255][T16100] null_blk: rq ffff88802260c800 timed out [ 2082.877207][T16100] null_blk: rq ffff88802260c980 timed out [ 2082.883284][T16100] null_blk: rq ffff88802260cb00 timed out [ 2082.890871][T16100] null_blk: rq ffff88802260cc80 timed out [ 2082.903075][T16100] null_blk: rq ffff88802260ce00 timed out [ 2082.909110][T16100] null_blk: rq ffff88802260cf80 timed out [ 2082.918903][T16100] null_blk: rq ffff88802260d100 timed out [ 2082.930863][T16100] null_blk: rq ffff88802260d280 timed out [ 2082.936927][T16100] null_blk: rq ffff88802260d400 timed out [ 2082.942863][T16100] null_blk: rq ffff88802260d580 timed out [ 2082.949036][T16100] null_blk: rq ffff88802260d700 timed out [ 2082.955186][T16100] null_blk: rq ffff88802260d880 timed out [ 2082.961082][T16100] null_blk: rq ffff88802260da00 timed out [ 2082.967250][T16100] null_blk: rq ffff88802260db80 timed out [ 2082.974311][T16100] null_blk: rq ffff88802260dd00 timed out [ 2082.980542][T16100] null_blk: rq ffff88802260de80 timed out [ 2083.176081][ T788] usb 5-1: USB disconnect, device number 119 [ 2085.543283][T23829] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 2085.747588][T23829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2086.003688][T21111] Bluetooth: hci3: command 0x0406 tx timeout [ 2086.414622][T24647] syzkaller0: entered promiscuous mode [ 2086.433361][T24647] syzkaller0: entered allmulticast mode [ 2086.454106][T23829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.462529][T23829] usb 7-1: Product: syz [ 2086.467769][T23829] usb 7-1: Manufacturer: syz [ 2086.474742][T23829] usb 7-1: SerialNumber: syz [ 2086.496879][T23829] usb 7-1: config 0 descriptor?? [ 2086.716084][T23829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2087.848687][T24660] overlayfs: missing 'workdir' [ 2087.854163][T24653] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4930'. [ 2087.872250][T24660] overlayfs: missing 'workdir' [ 2088.147944][T24666] fuse: Unknown parameter 'user_id00000000000000000000' [ 2089.320411][T24676] blktrace: Concurrent blktraces are not allowed on loop8 [ 2089.444689][T23829] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 2089.460443][T23829] usb 7-1: USB disconnect, device number 4 [ 2090.197939][T24682] syzkaller0: entered promiscuous mode [ 2090.212993][T24682] syzkaller0: entered allmulticast mode [ 2090.900831][T16100] null_blk: rq ffff888022608000 timed out [ 2090.906714][T16100] blk_print_req_error: 54 callbacks suppressed [ 2090.906724][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2090.923506][T16100] null_blk: rq ffff888022608180 timed out [ 2090.929224][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2090.939764][T16100] null_blk: rq ffff888022608300 timed out [ 2090.945697][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2090.957441][T16100] null_blk: rq ffff888022608480 timed out [ 2090.963450][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2090.974332][T16100] null_blk: rq ffff888022608600 timed out [ 2090.981499][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2090.995411][T16100] null_blk: rq ffff888022608780 timed out [ 2091.001732][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2091.012660][T16100] null_blk: rq ffff888022608900 timed out [ 2091.018598][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2091.029238][T16100] null_blk: rq ffff888022608a80 timed out [ 2091.035052][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2091.046375][T16100] null_blk: rq ffff888022608c00 timed out [ 2091.052112][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2091.062720][T16100] null_blk: rq ffff888022608d80 timed out [ 2091.068582][T16100] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2091.080193][T16100] null_blk: rq ffff888022608f00 timed out [ 2091.086014][T16100] null_blk: rq ffff888022609080 timed out [ 2091.091855][T16100] null_blk: rq ffff888022609200 timed out [ 2091.097666][T16100] null_blk: rq ffff888022609380 timed out [ 2091.103488][T16100] null_blk: rq ffff888022609500 timed out [ 2091.109210][T16100] null_blk: rq ffff888022609680 timed out [ 2091.115572][T16100] null_blk: rq ffff888022609800 timed out [ 2091.121315][T16100] null_blk: rq ffff888022609980 timed out [ 2091.127158][T16100] null_blk: rq ffff888022609b00 timed out [ 2091.132896][T16100] null_blk: rq ffff888022609c80 timed out [ 2091.138734][T16100] null_blk: rq ffff888022609e00 timed out [ 2091.144610][T16100] null_blk: rq ffff888022609f80 timed out [ 2091.150464][T16100] null_blk: rq ffff88802260a100 timed out [ 2091.156268][T16100] null_blk: rq ffff88802260a280 timed out [ 2091.162568][T16100] null_blk: rq ffff88802260a400 timed out [ 2091.168462][T16100] null_blk: rq ffff88802260a580 timed out [ 2091.174327][T16100] null_blk: rq ffff88802260a700 timed out [ 2091.180054][T16100] null_blk: rq ffff88802260a880 timed out [ 2091.186775][T16100] null_blk: rq ffff88802260aa00 timed out [ 2091.192519][T16100] null_blk: rq ffff88802260ab80 timed out [ 2091.198327][T16100] null_blk: rq ffff88802260ad00 timed out [ 2091.204132][T16100] null_blk: rq ffff88802260ae80 timed out [ 2091.210818][T16100] null_blk: rq ffff88802260b000 timed out [ 2091.216662][T16100] null_blk: rq ffff88802260b180 timed out [ 2091.222444][T16100] null_blk: rq ffff88802260b300 timed out [ 2091.228364][T16100] null_blk: rq ffff88802260b480 timed out [ 2091.234180][T16100] null_blk: rq ffff88802260b600 timed out [ 2091.239901][T16100] null_blk: rq ffff88802260b780 timed out [ 2091.245712][T16100] null_blk: rq ffff88802260b900 timed out [ 2091.251434][T16100] null_blk: rq ffff88802260ba80 timed out [ 2091.257538][T16100] null_blk: rq ffff88802260bc00 timed out [ 2091.263412][T16100] null_blk: rq ffff88802260bd80 timed out [ 2091.269290][T16100] null_blk: rq ffff88802260bf00 timed out [ 2091.275148][T16100] null_blk: rq ffff88802260c080 timed out [ 2091.281087][T16100] null_blk: rq ffff88802260c200 timed out [ 2091.289419][T16100] null_blk: rq ffff88802260c380 timed out [ 2091.295533][T16100] null_blk: rq ffff88802260c500 timed out [ 2091.301844][T16100] null_blk: rq ffff88802260c680 timed out [ 2091.307820][T16100] null_blk: rq ffff88802260c800 timed out [ 2091.313771][T16100] null_blk: rq ffff88802260c980 timed out [ 2091.319680][T16100] null_blk: rq ffff88802260cb00 timed out [ 2091.325629][T16100] null_blk: rq ffff88802260cc80 timed out [ 2091.331483][T16100] null_blk: rq ffff88802260ce00 timed out [ 2091.337637][T16100] null_blk: rq ffff88802260cf80 timed out [ 2091.343573][T16100] null_blk: rq ffff88802260d100 timed out [ 2091.349443][T16100] null_blk: rq ffff88802260d280 timed out [ 2091.355284][T16100] null_blk: rq ffff88802260d400 timed out [ 2091.361065][T16100] null_blk: rq ffff88802260d580 timed out [ 2091.366976][T16100] null_blk: rq ffff88802260d700 timed out [ 2091.372757][T16100] null_blk: rq ffff88802260d880 timed out [ 2091.378735][T16100] null_blk: rq ffff88802260da00 timed out [ 2091.384619][T16100] null_blk: rq ffff88802260db80 timed out [ 2091.391307][T16100] null_blk: rq ffff88802260dd00 timed out [ 2091.397149][T16100] null_blk: rq ffff88802260de80 timed out [ 2091.448987][T24689] xt_connbytes: Forcing CT accounting to be enabled [ 2091.455822][T24689] Cannot find set identified by id 0 to match [ 2091.614998][T24695] fuse: Unknown parameter 'user_id00000000000000000000' [ 2092.543361][ T5158] udevd[5158]: worker [23493] /devices/virtual/block/nbd0 is taking a long time [ 2093.450471][T24707] syzkaller0: entered promiscuous mode [ 2093.456564][T24707] syzkaller0: entered allmulticast mode [ 2095.797769][T24739] fuse: Bad value for 'fd' [ 2097.228764][T24748] blktrace: Concurrent blktraces are not allowed on loop10 [ 2099.009580][T24760] syzkaller0: entered promiscuous mode [ 2099.023588][T24760] syzkaller0: entered allmulticast mode [ 2099.063028][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.550760][T24766] Cannot find set identified by id 0 to match [ 2099.559047][T24768] fuse: Bad value for 'fd' [ 2100.179268][T19778] null_blk: rq ffff888022608000 timed out [ 2100.185427][T19778] blk_print_req_error: 54 callbacks suppressed [ 2100.185471][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.206122][T19778] null_blk: rq ffff888022608180 timed out [ 2100.212068][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.225268][T19778] null_blk: rq ffff888022608300 timed out [ 2100.231261][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.243922][T19778] null_blk: rq ffff888022608480 timed out [ 2100.250034][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.263678][T19778] null_blk: rq ffff888022608600 timed out [ 2100.269672][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.281023][T19778] null_blk: rq ffff888022608780 timed out [ 2100.287280][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.302008][T19778] null_blk: rq ffff888022608900 timed out [ 2100.308573][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.321994][T19778] null_blk: rq ffff888022608a80 timed out [ 2100.328447][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.343679][T19778] null_blk: rq ffff888022608c00 timed out [ 2100.349792][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.360733][T19778] null_blk: rq ffff888022608d80 timed out [ 2100.366745][T19778] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 2100.377745][T19778] null_blk: rq ffff888022608f00 timed out [ 2100.384313][T19778] null_blk: rq ffff888022609080 timed out [ 2100.390364][T19778] null_blk: rq ffff888022609200 timed out [ 2100.396383][T19778] null_blk: rq ffff888022609380 timed out [ 2100.402887][T19778] null_blk: rq ffff888022609500 timed out [ 2100.409200][T19778] null_blk: rq ffff888022609680 timed out [ 2100.426772][T19778] null_blk: rq ffff888022609800 timed out [ 2100.433081][T19778] null_blk: rq ffff888022609980 timed out [ 2100.444723][T19778] null_blk: rq ffff888022609b00 timed out [ 2100.451024][T19778] null_blk: rq ffff888022609c80 timed out [ 2100.609123][T19778] null_blk: rq ffff888022609e00 timed out [ 2100.615189][T19778] null_blk: rq ffff888022609f80 timed out [ 2100.620957][T19778] null_blk: rq ffff88802260a100 timed out [ 2100.626854][T19778] null_blk: rq ffff88802260a280 timed out [ 2100.633334][T19778] null_blk: rq ffff88802260a400 timed out [ 2100.639113][T19778] null_blk: rq ffff88802260a580 timed out [ 2100.644907][T19778] null_blk: rq ffff88802260a700 timed out [ 2100.650675][T19778] null_blk: rq ffff88802260a880 timed out [ 2100.656466][T19778] null_blk: rq ffff88802260aa00 timed out [ 2100.662221][T19778] null_blk: rq ffff88802260ab80 timed out [ 2100.668010][T19778] null_blk: rq ffff88802260ad00 timed out [ 2100.673828][T19778] null_blk: rq ffff88802260ae80 timed out [ 2100.681208][T19778] null_blk: rq ffff88802260b000 timed out [ 2100.687209][T19778] null_blk: rq ffff88802260b180 timed out [ 2100.692961][T19778] null_blk: rq ffff88802260b300 timed out [ 2100.698778][T19778] null_blk: rq ffff88802260b480 timed out [ 2100.705030][T19778] null_blk: rq ffff88802260b600 timed out [ 2100.710975][T19778] null_blk: rq ffff88802260b780 timed out [ 2100.716912][T19778] null_blk: rq ffff88802260b900 timed out [ 2100.722693][T19778] null_blk: rq ffff88802260ba80 timed out [ 2100.735776][T19778] null_blk: rq ffff88802260bc00 timed out [ 2100.741679][T19778] null_blk: rq ffff88802260bd80 timed out [ 2100.747556][T19778] null_blk: rq ffff88802260bf00 timed out [ 2100.753562][T19778] null_blk: rq ffff88802260c080 timed out [ 2100.759706][T19778] null_blk: rq ffff88802260c200 timed out [ 2100.765570][T19778] null_blk: rq ffff88802260c380 timed out [ 2101.317108][T24787] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2102.166935][T24797] syzkaller0: entered promiscuous mode [ 2102.172492][T24797] syzkaller0: entered allmulticast mode [ 2102.278825][T24802] fuse: Bad value for 'fd' [ 2103.221493][T24813] Cannot find set identified by id 0 to match [ 2103.230219][T24806] blktrace: Concurrent blktraces are not allowed on loop10 [ 2103.443636][ T5789] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2103.873233][ T5789] usb 8-1: Using ep0 maxpacket: 32 [ 2105.321645][ T5789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.374450][ T5789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2105.386390][ T5789] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2105.395895][ T5789] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.407703][ T5789] usb 8-1: config 0 descriptor?? [ 2105.420981][T19778] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 90 seconds [ 2105.868381][ T5789] usbhid 8-1:0.0: can't add hid device: -32 [ 2105.879490][ T5789] usbhid: probe of 8-1:0.0 failed with error -32 [ 2106.558398][ T5789] usb 8-1: USB disconnect, device number 41 [ 2106.796949][T24838] fuse: Unknown parameter '0x0000000000000003' [ 2107.056122][T24841] syzkaller0: entered promiscuous mode [ 2107.063934][T24841] syzkaller0: entered allmulticast mode [ 2111.462477][T24876] fuse: Unknown parameter '0x0000000000000003' [ 2112.303319][T24886] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2112.627205][T24884] blktrace: Concurrent blktraces are not allowed on loop10 [ 2112.644095][T24890] syzkaller0: entered promiscuous mode [ 2112.651655][T24890] syzkaller0: entered allmulticast mode [ 2113.088210][T24895] Cannot find set identified by id 0 to match [ 2114.625953][T24911] fuse: Unknown parameter '0x0000000000000003' [ 2117.080828][T24934] syzkaller0: entered promiscuous mode [ 2117.096947][T24934] syzkaller0: entered allmulticast mode [ 2117.897378][T24938] fuse: Unknown parameter '0x0000000000000003' [ 2118.281545][T21111] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 2118.288664][ T788] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 2118.600871][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.647113][ T788] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2118.683277][ T788] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 2118.692451][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.704705][T24949] 9pnet_virtio: no channels available for device syz [ 2118.722178][ T788] usb 7-1: config 0 descriptor?? [ 2118.983632][T24951] netlink: 173 bytes leftover after parsing attributes in process `syz.7.5016'. [ 2119.179419][ T788] holtek 0003:1241:5015.0047: item fetching failed at offset 2/5 [ 2119.209628][T24959] 9p: Unknown Cache mode or invalid value fscach [ 2119.217054][ T788] holtek 0003:1241:5015.0047: parse failed [ 2119.222964][ T788] holtek: probe of 0003:1241:5015.0047 failed with error -22 [ 2119.454864][ T788] usb 7-1: USB disconnect, device number 5 [ 2121.733748][T23829] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2121.755376][T24987] netlink: 173 bytes leftover after parsing attributes in process `syz.4.5026'. [ 2122.079920][T23829] usb 7-1: Using ep0 maxpacket: 32 [ 2122.122757][T23829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2122.143487][T23829] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2122.152708][T23829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.164419][T23829] usb 7-1: config 0 descriptor?? [ 2122.652604][T23829] cypress 0003:04B4:DE61.0048: item fetching failed at offset 0/2 [ 2122.662252][T23829] cypress 0003:04B4:DE61.0048: parse failed [ 2122.668732][T23829] cypress: probe of 0003:04B4:DE61.0048 failed with error -22 [ 2124.682938][ T788] usb 7-1: USB disconnect, device number 6 [ 2125.347805][T25008] overlayfs: failed to resolve './file1': -2 [ 2126.493545][T25013] netlink: 173 bytes leftover after parsing attributes in process `syz.6.5036'. [ 2129.907886][T25051] overlayfs: failed to resolve './file1': -2 [ 2130.392154][T25053] netlink: 173 bytes leftover after parsing attributes in process `syz.5.5046'. [ 2134.913360][T23829] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2135.279488][T23829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2135.345239][T23829] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2135.397026][T23829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.501933][T23829] usb 8-1: config 0 descriptor?? [ 2135.754458][T23829] pwc: Askey VC010 type 2 USB webcam detected. [ 2135.840823][T19778] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 120 seconds [ 2136.096099][T23829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2136.125461][T23829] pwc: recv_control_msg error -32 req 02 val 2700 [ 2136.144244][T23829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2136.153569][T23829] pwc: recv_control_msg error -32 req 04 val 1000 [ 2136.182347][T23829] pwc: recv_control_msg error -32 req 04 val 1300 [ 2136.198926][T23829] pwc: recv_control_msg error -32 req 04 val 1400 [ 2136.228087][T23829] pwc: recv_control_msg error -32 req 02 val 2000 [ 2136.249298][T23829] pwc: recv_control_msg error -32 req 02 val 2100 [ 2136.275638][T23829] pwc: recv_control_msg error -32 req 04 val 1500 [ 2136.296827][T23829] pwc: recv_control_msg error -71 req 02 val 2500 [ 2136.321978][T23829] pwc: recv_control_msg error -71 req 02 val 2400 [ 2136.334681][T23829] pwc: recv_control_msg error -71 req 02 val 2600 [ 2136.344540][T23829] pwc: recv_control_msg error -71 req 02 val 2900 [ 2136.363908][T23829] pwc: recv_control_msg error -71 req 02 val 2800 [ 2136.382049][T23829] pwc: recv_control_msg error -71 req 04 val 1100 [ 2136.394371][T23829] pwc: recv_control_msg error -71 req 04 val 1200 [ 2136.402988][T23829] pwc: Registered as video103. [ 2136.410461][T23829] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input90 [ 2136.434535][T23829] usb 8-1: USB disconnect, device number 42 [ 2139.980731][T25117] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2142.623323][ T28] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2144.431159][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 2144.448906][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.475419][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2144.523593][ T28] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2144.533717][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.569788][ T28] usb 5-1: config 0 descriptor?? [ 2144.903282][T23829] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2144.996925][ T28] ft260 0003:0403:6030.0049: unknown main item tag 0x7 [ 2145.085484][T23829] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2145.117451][T23829] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2145.130964][T23829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.142675][T23829] usb 8-1: config 0 descriptor?? [ 2145.170508][T23829] pwc: Askey VC010 type 2 USB webcam detected. [ 2145.194549][ T28] ft260 0003:0403:6030.0049: chip code: 6424 8183 [ 2145.303281][T14219] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2145.395283][ T28] ft260 0003:0403:6030.0049: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 2145.486302][T14219] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2145.495254][T14219] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2145.505570][T14219] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2145.514776][T14219] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2145.526377][T14219] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2145.544064][T14219] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2145.553342][T14219] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2145.562521][T14219] usb 7-1: Product: syz [ 2145.567914][T14219] usb 7-1: Manufacturer: syz [ 2145.591747][T14219] cdc_wdm 7-1:1.0: skipping garbage [ 2145.594217][T23829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2145.598468][ T28] ft260 0003:0403:6030.0049: failed to retrieve status: -32, no wakeup [ 2145.612896][T14219] cdc_wdm 7-1:1.0: skipping garbage [ 2145.613099][T23829] pwc: recv_control_msg error -32 req 02 val 2700 [ 2145.626515][T14219] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2145.632660][T14219] cdc_wdm 7-1:1.0: Unknown control protocol [ 2145.634445][T23829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2145.641526][ T28] ft260 0003:0403:6030.0049: failed to retrieve status: -71 [ 2145.663536][ T28] ft260 0003:0403:6030.0049: failed to reset I2C controller: -71 [ 2145.666242][T23829] pwc: recv_control_msg error -32 req 04 val 1000 [ 2145.694558][T23829] pwc: recv_control_msg error -32 req 04 val 1300 [ 2145.700964][ T28] usb 5-1: USB disconnect, device number 120 [ 2145.711456][T23829] pwc: recv_control_msg error -32 req 04 val 1400 [ 2145.742085][T23829] pwc: recv_control_msg error -32 req 02 val 2000 [ 2145.768560][T23829] pwc: recv_control_msg error -32 req 02 val 2100 [ 2145.786118][T23829] pwc: recv_control_msg error -32 req 04 val 1500 [ 2145.882921][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2145.883010][T20008] usb 7-1: USB disconnect, device number 7 [ 2145.889678][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2145.889698][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2146.005965][T23829] pwc: recv_control_msg error -32 req 02 val 2400 [ 2146.020879][T23829] pwc: recv_control_msg error -32 req 02 val 2600 [ 2146.044371][T23829] pwc: recv_control_msg error -32 req 02 val 2900 [ 2146.268042][T23829] pwc: recv_control_msg error -71 req 04 val 1100 [ 2146.294043][T23829] pwc: recv_control_msg error -71 req 04 val 1200 [ 2146.323915][T23829] pwc: Registered as video103. [ 2146.346229][T23829] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input91 [ 2146.392205][T23829] usb 8-1: USB disconnect, device number 43 [ 2147.206078][T24606] Bluetooth: hci2: command 0x0406 tx timeout [ 2149.331876][T25192] tipc: Enabled bearer , priority 0 [ 2149.360577][T25192] tipc: Resetting bearer [ 2149.393576][T25190] tipc: Disabling bearer [ 2149.623266][ T28] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2149.874391][ T28] usb 8-1: Using ep0 maxpacket: 8 [ 2149.882027][ T28] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.904600][ T28] usb 8-1: config 0 has no interfaces? [ 2149.910161][ T28] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2150.047808][ T28] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.067143][ T28] usb 8-1: config 0 descriptor?? [ 2150.188444][T25203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2151.255783][T25201] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2151.383520][T20008] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2151.743333][T20008] usb 6-1: Using ep0 maxpacket: 32 [ 2151.772418][T20008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2151.831921][T20008] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2151.866041][T20008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.920925][T20008] usb 6-1: config 0 descriptor?? [ 2152.365861][T20008] cypress 0003:04B4:DE61.004A: item fetching failed at offset 0/2 [ 2152.389644][T20008] cypress 0003:04B4:DE61.004A: parse failed [ 2152.414467][T20008] cypress: probe of 0003:04B4:DE61.004A failed with error -22 [ 2155.763781][T20008] usb 8-1: USB disconnect, device number 44 [ 2156.121691][ T28] usb 6-1: USB disconnect, device number 14 [ 2158.064376][T25233] netlink: 340 bytes leftover after parsing attributes in process `syz.4.5101'. [ 2158.073865][T25233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5101'. [ 2160.888291][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2162.240878][T25277] warning: `syz.4.5113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2163.407627][T25281] tipc: Enabling of bearer rejected, failed to enable media [ 2163.765840][T25285] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2164.573486][T14219] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2164.872103][T14219] usb 7-1: device descriptor read/64, error -71 [ 2164.913755][T23829] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2165.103376][T23829] usb 6-1: Using ep0 maxpacket: 16 [ 2165.115223][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2165.126962][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2165.137312][T23829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2165.145417][T14219] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2165.157972][T23829] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2165.167645][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.179607][T23829] usb 6-1: config 0 descriptor?? [ 2165.313643][T14219] usb 7-1: device descriptor read/64, error -71 [ 2165.510884][T14219] usb usb7-port1: attempt power cycle [ 2165.609659][T23829] shield 0003:0955:7214.004B: unknown main item tag 0x0 [ 2165.633438][T23829] shield 0003:0955:7214.004B: unknown main item tag 0x0 [ 2165.652863][T23829] shield 0003:0955:7214.004B: unknown main item tag 0x0 [ 2165.673497][T23829] shield 0003:0955:7214.004B: unknown main item tag 0x0 [ 2165.683216][T23829] shield 0003:0955:7214.004B: unknown main item tag 0x0 [ 2165.710984][T23829] input: HID 0955:7214 Haptics as /devices/virtual/input/input92 [ 2165.822014][T25291] netlink: 'syz.5.5118': attribute type 2 has an invalid length. [ 2165.831159][T25291] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5118'. [ 2166.376994][T14219] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2166.571803][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 150 seconds [ 2166.579659][T23829] shield 0003:0955:7214.004B: Registered Thunderstrike controller [ 2166.584858][T14219] usb 7-1: device descriptor read/8, error -71 [ 2166.595018][T23829] shield 0003:0955:7214.004B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 2166.800627][T23829] usb 6-1: USB disconnect, device number 15 [ 2166.830864][ T5789] shield 0003:0955:7214.004B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2166.876809][ T5789] shield 0003:0955:7214.004B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2166.940652][T25318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5124'. [ 2167.500908][ T5789] shield 0003:0955:7214.004B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2167.512155][ T5789] shield 0003:0955:7214.004B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2167.532936][T25319] netlink: 'syz.6.5123': attribute type 10 has an invalid length. [ 2167.632450][T25319] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2167.809942][T25314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.812724][T25324] tipc: Enabling of bearer rejected, failed to enable media [ 2170.116712][T25353] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2170.143381][T23829] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2170.584566][T23829] usb 8-1: device descriptor read/64, error -71 [ 2170.643607][ T788] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2171.387219][T23829] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2171.493472][ T788] usb 5-1: device descriptor read/64, error -71 [ 2171.587622][T25368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2171.833773][ T788] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2172.103291][ T788] usb 5-1: device descriptor read/64, error -71 [ 2172.234691][ T788] usb usb5-port1: attempt power cycle [ 2173.403456][ T7211] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 2174.322034][ T7211] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.354349][ T7211] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2174.366241][ T7211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.413553][ T7211] usb 8-1: config 0 descriptor?? [ 2174.429766][ T7211] pwc: Askey VC010 type 2 USB webcam detected. [ 2175.413409][ T7211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2175.445488][ T7211] pwc: recv_control_msg error -32 req 02 val 2700 [ 2175.452967][ T7211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2175.482101][ T7211] pwc: recv_control_msg error -32 req 04 val 1000 [ 2175.518684][ T7211] pwc: recv_control_msg error -32 req 04 val 1300 [ 2175.550190][ T7211] pwc: recv_control_msg error -32 req 04 val 1400 [ 2175.574347][ T7211] pwc: recv_control_msg error -32 req 02 val 2000 [ 2175.596107][ T7211] pwc: recv_control_msg error -32 req 02 val 2100 [ 2175.701094][ T7211] pwc: recv_control_msg error -32 req 04 val 1500 [ 2175.919892][ T7211] pwc: recv_control_msg error -32 req 02 val 2400 [ 2175.946301][ T7211] pwc: recv_control_msg error -71 req 02 val 2600 [ 2175.975087][ T7211] pwc: recv_control_msg error -71 req 02 val 2900 [ 2175.982422][ T7211] pwc: recv_control_msg error -71 req 02 val 2800 [ 2175.991686][ T7211] pwc: recv_control_msg error -71 req 04 val 1100 [ 2176.000131][ T7211] pwc: recv_control_msg error -71 req 04 val 1200 [ 2176.035431][ T7211] pwc: Registered as video103. [ 2176.069941][ T7211] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input93 [ 2176.121402][ T7211] usb 8-1: USB disconnect, device number 47 [ 2176.579821][T25404] blktrace: Concurrent blktraces are not allowed on loop8 [ 2176.706761][T25410] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2177.633463][ T5823] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2177.793553][ T5823] usb 8-1: device descriptor read/64, error -71 [ 2178.103546][ T5823] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2178.189769][T23829] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2178.263472][ T5823] usb 8-1: device descriptor read/64, error -71 [ 2178.385708][ T5823] usb usb8-port1: attempt power cycle [ 2178.392740][T23829] usb 6-1: Using ep0 maxpacket: 32 [ 2178.429225][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.457529][T23829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.497568][T23829] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2178.519547][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.557606][T23829] usb 6-1: config 0 descriptor?? [ 2178.824603][ T5823] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 2178.868250][ T5823] usb 8-1: device descriptor read/8, error -71 [ 2178.993741][T23829] ft260 0003:0403:6030.004C: unknown main item tag 0x7 [ 2179.144150][ T5823] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2179.175295][ T5823] usb 8-1: device descriptor read/8, error -71 [ 2179.193456][T23829] ft260 0003:0403:6030.004C: chip code: 6424 8183 [ 2179.294774][ T5823] usb usb8-port1: unable to enumerate USB device [ 2179.394397][T23829] ft260 0003:0403:6030.004C: failed to retrieve system status [ 2179.405183][T23829] ft260: probe of 0003:0403:6030.004C failed with error -32 [ 2180.919697][T23829] usb 6-1: USB disconnect, device number 16 [ 2181.512731][T23829] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2182.000946][T23829] usb 6-1: Using ep0 maxpacket: 8 [ 2182.027925][T23829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2182.064377][T23829] usb 6-1: config 0 has no interfaces? [ 2182.069944][T23829] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2182.088032][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.111012][T23829] usb 6-1: config 0 descriptor?? [ 2182.130893][T25452] syzkaller0: entered promiscuous mode [ 2182.150959][T25452] syzkaller0: entered allmulticast mode [ 2185.380431][ T5823] usb 6-1: USB disconnect, device number 17 [ 2185.856141][T25468] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2186.353338][T23829] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2186.513477][T20585] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2186.663288][T23829] usb 5-1: Using ep0 maxpacket: 32 [ 2186.729847][T23829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.775895][T23829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2186.795777][T23829] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2186.808404][T23829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.826615][T23829] usb 5-1: config 0 descriptor?? [ 2186.858533][T20585] usb 7-1: device descriptor read/64, error -71 [ 2187.163492][T20585] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2187.598684][T23829] ft260 0003:0403:6030.004D: unknown main item tag 0x7 [ 2187.807222][T23829] ft260 0003:0403:6030.004D: chip code: 6424 8183 [ 2188.014590][T23829] ft260 0003:0403:6030.004D: failed to retrieve system status [ 2188.032762][T23829] ft260: probe of 0003:0403:6030.004D failed with error -32 [ 2188.428547][T25496] syzkaller0: entered promiscuous mode [ 2188.439207][T25496] syzkaller0: entered allmulticast mode [ 2190.492749][T23829] usb 5-1: USB disconnect, device number 124 [ 2190.853596][ T5823] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2191.443634][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 2191.468909][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.483380][ T5823] usb 6-1: config 0 has no interfaces? [ 2191.490497][ T5823] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2191.500481][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.554185][ T5823] usb 6-1: config 0 descriptor?? [ 2191.696367][T25521] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2191.753463][ T7211] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 2191.913424][ T7211] usb 8-1: device descriptor read/64, error -71 [ 2192.019981][T20008] usb 6-1: USB disconnect, device number 18 [ 2192.183254][ T7211] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 2192.343339][ T7211] usb 8-1: device descriptor read/64, error -71 [ 2192.472369][ T7211] usb usb8-port1: attempt power cycle [ 2193.663318][ T7211] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 2193.823690][ T7211] usb 8-1: device descriptor read/8, error -71 [ 2194.473444][T20008] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2194.543578][ T7211] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 2194.573389][ T5823] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2194.575990][ T7211] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2194.595082][ T7211] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2194.605619][ T7211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.615613][ T7211] usb 8-1: config 0 descriptor?? [ 2194.626133][ T7211] pwc: Askey VC010 type 2 USB webcam detected. [ 2194.653449][T20008] usb 5-1: Using ep0 maxpacket: 32 [ 2194.661357][T20008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.672870][T20008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.683316][T20008] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2194.692461][T20008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.709738][T20008] usb 5-1: config 0 descriptor?? [ 2194.753375][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 2194.761711][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2194.773279][ T5823] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2194.782506][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.793444][ T5823] usb 7-1: config 0 descriptor?? [ 2195.030593][ T7211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2195.039017][ T7211] pwc: recv_control_msg error -32 req 02 val 2700 [ 2195.047501][ T7211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2195.056188][ T7211] pwc: recv_control_msg error -32 req 04 val 1000 [ 2195.063790][ T7211] pwc: recv_control_msg error -32 req 04 val 1300 [ 2195.071090][ T7211] pwc: recv_control_msg error -32 req 04 val 1400 [ 2195.078561][ T7211] pwc: recv_control_msg error -32 req 02 val 2000 [ 2195.090764][ T7211] pwc: recv_control_msg error -32 req 02 val 2100 [ 2195.098178][ T7211] pwc: recv_control_msg error -32 req 04 val 1500 [ 2195.130098][T20008] ft260 0003:0403:6030.004E: unknown main item tag 0x7 [ 2195.343610][ T7211] pwc: recv_control_msg error -71 req 02 val 2400 [ 2195.345619][T20008] ft260 0003:0403:6030.004E: chip code: 6424 8183 [ 2195.557116][T20008] ft260 0003:0403:6030.004E: failed to retrieve system status [ 2195.670022][T20008] ft260: probe of 0003:0403:6030.004E failed with error -32 [ 2196.988523][T19778] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 180 seconds [ 2197.240457][ T7211] pwc: recv_control_msg error -71 req 02 val 2600 [ 2197.247598][ T7211] pwc: recv_control_msg error -71 req 02 val 2900 [ 2197.255644][ T7211] pwc: recv_control_msg error -71 req 02 val 2800 [ 2197.269923][ T7211] pwc: recv_control_msg error -71 req 04 val 1100 [ 2197.286471][ T7211] pwc: recv_control_msg error -71 req 04 val 1200 [ 2197.310951][ T7211] pwc: Registered as video103. [ 2197.330881][ T7211] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input94 [ 2197.371549][ T7211] usb 8-1: USB disconnect, device number 55 [ 2197.386264][ T5823] usbhid 7-1:0.0: can't add hid device: -71 [ 2197.430221][ T5823] usbhid: probe of 7-1:0.0 failed with error -71 [ 2197.485897][ T5823] usb 7-1: USB disconnect, device number 14 [ 2197.486481][T25550] veth0_vlan: entered allmulticast mode [ 2198.206136][ T5823] usb 5-1: USB disconnect, device number 125 [ 2198.643513][T25550] ˙˙˙˙˙˙: renamed from vlan1 [ 2198.872066][T25562] wg2: entered promiscuous mode [ 2199.081601][T25562] wg2: entered allmulticast mode [ 2199.518056][T20008] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 2200.563436][T20008] usb 8-1: Using ep0 maxpacket: 8 [ 2200.570474][T20008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.580852][T20008] usb 8-1: config 0 has no interfaces? [ 2200.591058][T20008] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2200.600808][T20008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.622472][T20008] usb 8-1: config 0 descriptor?? [ 2200.705441][ T7211] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2200.766548][ T788] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2200.934142][ T7211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.960215][ T788] usb 6-1: Using ep0 maxpacket: 32 [ 2200.981895][ T7211] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2200.993290][ T7211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.002167][ T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.023496][ T788] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2201.040946][ T7211] usb 7-1: config 0 descriptor?? [ 2201.058633][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.087218][ T7211] pwc: Askey VC010 type 2 USB webcam detected. [ 2201.125781][ T788] usb 6-1: config 0 descriptor?? [ 2201.279520][T20008] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2201.483406][T20008] usb 5-1: device descriptor read/64, error -71 [ 2201.484683][ T7211] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2201.504640][ T7211] pwc: recv_control_msg error -32 req 02 val 2700 [ 2201.512238][ T7211] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2201.520256][ T7211] pwc: recv_control_msg error -32 req 04 val 1000 [ 2201.528507][ T7211] pwc: recv_control_msg error -32 req 04 val 1300 [ 2201.536321][ T7211] pwc: recv_control_msg error -32 req 04 val 1400 [ 2201.544410][ T7211] pwc: recv_control_msg error -32 req 02 val 2000 [ 2201.552027][ T7211] pwc: recv_control_msg error -32 req 02 val 2100 [ 2201.561038][ T7211] pwc: recv_control_msg error -32 req 04 val 1500 [ 2201.571260][ T7211] pwc: recv_control_msg error -32 req 02 val 2500 [ 2201.585221][ T7211] pwc: recv_control_msg error -71 req 02 val 2400 [ 2201.592628][ T7211] pwc: recv_control_msg error -71 req 02 val 2600 [ 2201.600484][ T7211] pwc: recv_control_msg error -71 req 02 val 2900 [ 2201.608905][ T7211] pwc: recv_control_msg error -71 req 02 val 2800 [ 2201.641310][ T7211] pwc: recv_control_msg error -71 req 04 val 1100 [ 2201.717054][ T7211] pwc: recv_control_msg error -71 req 04 val 1200 [ 2201.783305][T20008] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2201.827403][ T7211] pwc: Registered as video103. [ 2202.439690][ T7211] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input95 [ 2203.007659][ T7211] usb 7-1: USB disconnect, device number 15 [ 2203.593458][T20008] usb 5-1: device descriptor read/64, error -71 [ 2203.631432][T20585] usb 8-1: USB disconnect, device number 56 [ 2203.715217][T20008] usb usb5-port1: attempt power cycle [ 2203.717307][ T788] usbhid 6-1:0.0: can't add hid device: -71 [ 2203.755548][ T788] usbhid: probe of 6-1:0.0 failed with error -71 [ 2203.775122][ T788] usb 6-1: USB disconnect, device number 19 [ 2204.706621][T25593] pim6reg1: entered promiscuous mode [ 2204.713252][T25593] pim6reg1: entered allmulticast mode [ 2205.768670][T25612] blktrace: Concurrent blktraces are not allowed on loop10 [ 2206.716079][T20008] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 2206.926428][T20008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2206.973310][T20008] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2207.035860][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2207.123468][T20008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.253293][T20008] usb 8-1: config 0 descriptor?? [ 2207.333427][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 2207.409124][ T5823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.493529][T20008] pwc: Askey VC010 type 2 USB webcam detected. [ 2207.511645][ T5823] usb 5-1: config 0 has no interfaces? [ 2207.522962][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2207.532980][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.562579][ T5823] usb 5-1: config 0 descriptor?? [ 2207.723879][T20008] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2207.731626][T20008] pwc: recv_control_msg error -32 req 02 val 2700 [ 2207.743953][T20008] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2207.751364][T20008] pwc: recv_control_msg error -32 req 04 val 1000 [ 2207.760322][T20008] pwc: recv_control_msg error -32 req 04 val 1300 [ 2207.768227][T20008] pwc: recv_control_msg error -32 req 04 val 1400 [ 2207.781836][T20008] pwc: recv_control_msg error -32 req 02 val 2000 [ 2207.789690][T20008] pwc: recv_control_msg error -32 req 02 val 2100 [ 2207.808085][T20008] pwc: recv_control_msg error -32 req 04 val 1500 [ 2207.819840][T20008] pwc: recv_control_msg error -32 req 02 val 2500 [ 2207.833644][T20008] pwc: recv_control_msg error -71 req 02 val 2400 [ 2207.850920][T20008] pwc: recv_control_msg error -71 req 02 val 2600 [ 2207.861021][T20008] pwc: recv_control_msg error -71 req 02 val 2900 [ 2207.879260][T20008] pwc: recv_control_msg error -71 req 02 val 2800 [ 2207.889764][T20008] pwc: recv_control_msg error -71 req 04 val 1100 [ 2207.903621][T20008] pwc: recv_control_msg error -71 req 04 val 1200 [ 2207.922036][T20008] pwc: Registered as video103. [ 2207.942398][T20008] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input96 [ 2207.976660][T20008] usb 8-1: USB disconnect, device number 57 [ 2210.494889][T20585] usb 5-1: USB disconnect, device number 3 [ 2211.028767][T25655] blktrace: Concurrent blktraces are not allowed on loop8 [ 2213.555498][ T5158] udevd[5158]: worker [23493] /devices/virtual/block/nbd0 timeout; kill it [ 2213.570361][ T5158] udevd[5158]: seq 25433 '/devices/virtual/block/nbd0' killed [ 2214.133450][T20008] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2214.253398][ T5823] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2214.291611][T25665] pim6reg1: entered promiscuous mode [ 2214.297225][T25665] pim6reg1: entered allmulticast mode [ 2214.333317][T20008] usb 7-1: Using ep0 maxpacket: 32 [ 2214.372177][T20008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.389262][T20008] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.430345][ T5823] usb 6-1: device descriptor read/64, error -71 [ 2214.512154][T20008] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2214.524830][T20008] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.594321][T20008] usb 7-1: config 0 descriptor?? [ 2214.973501][ T5823] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2215.146312][ T5823] usb 6-1: device descriptor read/64, error -71 [ 2215.219468][T20008] ft260 0003:0403:6030.004F: unknown main item tag 0x7 [ 2215.364805][ T5823] usb usb6-port1: attempt power cycle [ 2215.428357][T20008] ft260 0003:0403:6030.004F: chip code: 0000 0000 [ 2215.618672][T20008] ft260 0003:0403:6030.004F: failed to retrieve system status [ 2215.633757][T20008] ft260: probe of 0003:0403:6030.004F failed with error -32 [ 2215.863631][ T5823] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2216.448040][ T5823] usb 6-1: device descriptor read/8, error -71 [ 2216.520353][T20008] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 2216.612780][T25688] tipc: Enabling of bearer rejected, failed to enable media [ 2216.724738][T20008] usb 8-1: Using ep0 maxpacket: 8 [ 2216.737695][T20008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.755868][T20008] usb 8-1: config 0 has no interfaces? [ 2216.771055][T20008] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2216.792949][T20008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.822838][T20008] usb 8-1: config 0 descriptor?? [ 2217.812968][ T5823] usb 7-1: USB disconnect, device number 16 [ 2218.325001][T25704] blktrace: Concurrent blktraces are not allowed on loop8 [ 2219.777221][ T5823] usb 8-1: USB disconnect, device number 58 [ 2221.929932][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.308033][T25741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2223.873343][ T5823] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2224.113380][ T5823] usb 7-1: Using ep0 maxpacket: 8 [ 2225.019826][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.169652][ T5823] usb 7-1: config 0 has no interfaces? [ 2225.306130][ T5823] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2225.370562][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.507661][ T5823] usb 7-1: config 0 descriptor?? [ 2226.461085][T25769] wg2: entered promiscuous mode [ 2226.473410][T25769] wg2: entered allmulticast mode [ 2227.060807][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 210 seconds [ 2228.483358][T20585] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2228.713419][ T788] usb 7-1: USB disconnect, device number 17 [ 2228.810901][T20585] usb 5-1: Using ep0 maxpacket: 32 [ 2228.829967][T20585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2228.858517][T20585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.578882][T20585] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2229.662281][T20585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.690823][T20585] usb 5-1: config 0 descriptor?? [ 2230.369442][T20585] ft260 0003:0403:6030.0050: unknown main item tag 0x7 [ 2230.589274][T20585] ft260 0003:0403:6030.0050: failed to retrieve chip version [ 2230.603627][T20585] ft260: probe of 0003:0403:6030.0050 failed with error -32 [ 2230.724896][T25816] tipc: Enabled bearer , priority 0 [ 2230.762802][T25816] tipc: Resetting bearer [ 2230.804263][T25815] tipc: Disabling bearer [ 2231.083385][ T788] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2231.293341][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 2231.300184][ T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.311942][ T788] usb 6-1: config 0 has no interfaces? [ 2231.317954][ T788] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2231.334995][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.346059][ T788] usb 6-1: config 0 descriptor?? [ 2231.423386][T20585] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2231.618799][T20585] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.638160][T20585] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2231.655246][T20585] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.676635][T20585] usb 7-1: config 0 descriptor?? [ 2231.704136][T20585] pwc: Askey VC010 type 2 USB webcam detected. [ 2231.717787][ T788] usb 5-1: USB disconnect, device number 4 [ 2232.128383][T25837] netlink: 173 bytes leftover after parsing attributes in process `syz.7.5274'. [ 2232.151953][T20585] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2232.177935][T20585] pwc: recv_control_msg error -32 req 02 val 2700 [ 2232.227968][T20585] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2232.245004][T20585] pwc: recv_control_msg error -32 req 04 val 1000 [ 2232.260922][T20585] pwc: recv_control_msg error -32 req 04 val 1300 [ 2232.279980][T20585] pwc: recv_control_msg error -32 req 04 val 1400 [ 2232.293586][T20585] pwc: recv_control_msg error -32 req 02 val 2000 [ 2232.306345][T20585] pwc: recv_control_msg error -32 req 02 val 2100 [ 2232.453395][T23829] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2232.539420][T20585] pwc: recv_control_msg error -32 req 02 val 2500 [ 2232.592208][T20585] pwc: recv_control_msg error -71 req 02 val 2400 [ 2232.613520][T20585] pwc: recv_control_msg error -71 req 02 val 2600 [ 2232.634167][T20585] pwc: recv_control_msg error -71 req 02 val 2900 [ 2232.644800][T20585] pwc: recv_control_msg error -71 req 02 val 2800 [ 2232.666555][T20585] pwc: recv_control_msg error -71 req 04 val 1100 [ 2232.676355][T23829] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2232.683636][T20585] pwc: recv_control_msg error -71 req 04 val 1200 [ 2232.702639][T23829] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2232.707079][T20585] pwc: Registered as video103. [ 2232.747161][T20585] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input97 [ 2232.753519][T23829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2232.807482][T20585] usb 7-1: USB disconnect, device number 18 [ 2232.814454][T23829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2232.814487][T23829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2232.816729][T23829] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2232.893059][T23829] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2233.105558][T23829] usb 5-1: Product: syz [ 2233.112040][T23829] usb 5-1: Manufacturer: syz [ 2233.128099][T23829] cdc_wdm 5-1:1.0: skipping garbage [ 2233.143234][T23829] cdc_wdm 5-1:1.0: skipping garbage [ 2233.860495][T23829] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2233.867183][T23829] cdc_wdm 5-1:1.0: Unknown control protocol [ 2233.882269][T23829] usb 5-1: USB disconnect, device number 5 [ 2233.947507][ T5823] usb 6-1: USB disconnect, device number 24 [ 2233.974023][T25854] tipc: Started in network mode [ 2233.981599][T25854] tipc: Node identity 3ed70771b719, cluster identity 4711 [ 2234.011348][T25854] tipc: Enabled bearer , priority 0 [ 2234.041175][T25854] tipc: Resetting bearer [ 2234.087678][T25853] tipc: Disabling bearer [ 2234.293277][ T788] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 2234.843366][ T788] usb 8-1: Using ep0 maxpacket: 32 [ 2234.852457][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2234.865932][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2234.881814][ T788] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2234.895935][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.909714][T25872] blktrace: Concurrent blktraces are not allowed on loop8 [ 2234.943903][ T788] usb 8-1: config 0 descriptor?? [ 2235.393043][T25878] loop5: detected capacity change from 0 to 128 [ 2235.442876][ T788] ft260 0003:0403:6030.0051: unknown main item tag 0x7 [ 2236.198837][ T788] ft260 0003:0403:6030.0051: failed to retrieve chip version [ 2236.210915][ T788] ft260: probe of 0003:0403:6030.0051 failed with error -32 [ 2236.593267][ T788] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2236.773620][T20585] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2236.808792][ T788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.820865][ T788] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2236.822451][T25888] loop4: detected capacity change from 0 to 128 [ 2236.840638][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.862886][ T788] usb 7-1: config 0 descriptor?? [ 2236.885875][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 2236.902041][T25888] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 2236.917338][T25888] hpfs: filesystem error: improperly stopped [ 2236.923940][T25888] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 2236.931852][T25888] hpfs: You really don't want any checks? You are crazy... [ 2236.941150][T25888] hpfs: hpfs_map_sector(): read error [ 2236.947210][T25888] hpfs: code page support is disabled [ 2236.954443][T25888] hpfs: hpfs_map_4sectors(): unaligned read [ 2236.960759][T25888] hpfs: hpfs_map_4sectors(): unaligned read [ 2236.966805][T25888] hpfs: filesystem error: unable to find root dir [ 2236.973377][T20585] usb 6-1: Using ep0 maxpacket: 8 [ 2236.981295][T20585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.999957][T20585] usb 6-1: config 0 has no interfaces? [ 2237.017474][T20585] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2237.031597][T20585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.051383][T20585] usb 6-1: config 0 descriptor?? [ 2237.281301][T23829] usb 8-1: USB disconnect, device number 59 [ 2237.394378][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2237.434434][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 2237.463250][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2237.499984][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 2237.516649][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 2237.537832][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 2237.933478][T23829] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 2238.218528][T23829] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2238.249160][T23829] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2238.281727][T23829] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2238.296878][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 2238.322068][ T788] pwc: recv_control_msg error -32 req 02 val 2100 [ 2238.343530][T23829] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2238.380016][T23829] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2238.395520][T23829] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2238.405552][T23829] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2238.410180][T25904] loop4: detected capacity change from 0 to 256 [ 2238.430863][T23829] usb 8-1: Product: syz [ 2238.436942][T23829] usb 8-1: Manufacturer: syz [ 2238.457886][T23829] cdc_wdm 8-1:1.0: skipping garbage [ 2238.468367][T23829] cdc_wdm 8-1:1.0: skipping garbage [ 2238.495816][T23829] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2238.516373][T23829] cdc_wdm 8-1:1.0: Unknown control protocol [ 2238.521254][T25904] overlayfs: missing 'lowerdir' [ 2238.559927][ T788] pwc: recv_control_msg error -32 req 02 val 2500 [ 2238.587979][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 2238.609425][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 2238.625627][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 2238.638905][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 2238.652087][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 2238.675581][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 2238.692609][ T788] pwc: Registered as video103. [ 2238.700718][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input98 [ 2238.728513][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 2238.729733][ T28] usb 8-1: USB disconnect, device number 60 [ 2238.735172][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 2238.735197][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2238.778822][ T788] usb 7-1: USB disconnect, device number 19 [ 2239.131956][T25912] loop6: detected capacity change from 0 to 8 [ 2239.552884][ T28] usb 6-1: USB disconnect, device number 25 [ 2239.595025][T25918] blktrace: Concurrent blktraces are not allowed on loop14 [ 2240.969516][T25934] syzkaller0: entered promiscuous mode [ 2240.975272][T25934] syzkaller0: entered allmulticast mode [ 2241.040699][ T5823] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2241.245916][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 2241.910185][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2241.924469][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2241.935854][ T5823] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2241.948152][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.981731][ T5823] usb 5-1: config 0 descriptor?? [ 2242.433080][ T5823] ft260 0003:0403:6030.0052: unknown main item tag 0x7 [ 2242.462150][T25938] loop5: detected capacity change from 0 to 32768 [ 2242.617202][ T5823] ft260 0003:0403:6030.0052: failed to retrieve chip version [ 2242.693675][ T5823] ft260: probe of 0003:0403:6030.0052 failed with error -32 [ 2242.694329][T25938] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2242.903616][T25938] XFS (loop5): Ending clean mount [ 2242.958374][T25938] XFS (loop5): Quotacheck needed: Please wait. [ 2243.096932][T25938] XFS (loop5): Quotacheck: Done. [ 2243.183831][ T28] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 2243.395233][ T28] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2243.421881][ T28] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2243.437236][ T28] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2243.460955][ T28] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2243.472531][ T28] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2243.488903][ T28] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2243.495690][T23384] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2243.498332][ T28] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2243.523261][ T28] usb 8-1: Product: syz [ 2243.528231][ T28] usb 8-1: Manufacturer: syz [ 2243.557134][ T28] cdc_wdm 8-1:1.0: skipping garbage [ 2243.562669][ T28] cdc_wdm 8-1:1.0: skipping garbage [ 2243.577389][ T28] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2243.583646][ T28] cdc_wdm 8-1:1.0: Unknown control protocol [ 2243.719510][T23829] usb 5-1: USB disconnect, device number 6 [ 2243.892715][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 2243.893124][ T5789] usb 8-1: USB disconnect, device number 61 [ 2243.899460][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 2243.899480][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2243.948900][T25961] loop4: detected capacity change from 0 to 2048 [ 2244.167679][T25961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2244.319568][T25961] overlayfs: upper fs needs to support d_type. [ 2244.334402][T25961] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2244.342214][T25961] overlayfs: failed to set xattr on upper [ 2244.348595][T25961] overlayfs: ...falling back to redirect_dir=nofollow. [ 2244.360417][T25961] overlayfs: ...falling back to index=off. [ 2244.367381][T25961] overlayfs: ...falling back to uuid=null. [ 2244.379523][T25961] overlayfs: overlapping lowerdir path [ 2245.756293][T25974] loop4: detected capacity change from 0 to 4096 [ 2245.782897][T25974] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 2245.841348][T25974] ntfs3: loop4: Failed to load $Extend (-22). [ 2245.854588][T25974] ntfs3: loop4: Failed to initialize $Extend. [ 2248.049933][T25992] loop5: detected capacity change from 0 to 1024 [ 2248.127572][T25992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2248.259359][T25992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2248.802868][T25992] EXT4-fs error (device loop5): ext4_xattr_inode_iget:444: inode #11: comm syz.5.5322: missing EA_INODE flag [ 2248.819564][ T27] audit: type=1800 audit(1762243333.434:46): pid=25992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5322" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 2248.920490][T25992] EXT4-fs (loop5): Remounting filesystem read-only [ 2248.932578][T25992] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2249.107386][T23384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2249.330670][T26006] loop5: detected capacity change from 0 to 256 [ 2249.458451][T26006] FAT-fs (loop5): Directory bread(block 64) failed [ 2249.492196][T26006] FAT-fs (loop5): Directory bread(block 65) failed [ 2249.517473][T26006] FAT-fs (loop5): Directory bread(block 66) failed [ 2249.533553][T26006] FAT-fs (loop5): Directory bread(block 67) failed [ 2249.547119][T26006] FAT-fs (loop5): Directory bread(block 68) failed [ 2249.563607][T26006] FAT-fs (loop5): Directory bread(block 69) failed [ 2249.694870][T26006] FAT-fs (loop5): Directory bread(block 70) failed [ 2249.721715][T26006] FAT-fs (loop5): Directory bread(block 71) failed [ 2249.744932][T26006] FAT-fs (loop5): Directory bread(block 72) failed [ 2249.776546][T26006] FAT-fs (loop5): Directory bread(block 73) failed [ 2250.607857][T25994] loop4: detected capacity change from 0 to 40427 [ 2250.633612][T25994] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable [ 2253.453445][ T28] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2253.613371][ T28] usb 5-1: device descriptor read/64, error -71 [ 2253.707929][ T5789] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2253.883415][ T28] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2253.893378][ T5789] usb 7-1: Using ep0 maxpacket: 8 [ 2253.912110][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.931865][ T5789] usb 7-1: config 0 has no interfaces? [ 2253.943283][ T5789] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2253.954011][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.040435][ T5789] usb 7-1: config 0 descriptor?? [ 2254.860807][ T28] usb 5-1: device descriptor read/64, error -71 [ 2254.983412][ T28] usb usb5-port1: attempt power cycle [ 2255.893379][ T28] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2256.113944][ T28] usb 5-1: device not accepting address 9, error -71 [ 2256.582553][T23829] usb 7-1: USB disconnect, device number 20 [ 2256.917205][T26062] loop6: detected capacity change from 0 to 764 [ 2256.982347][T26058] netlink: 173 bytes leftover after parsing attributes in process `syz.4.5340'. [ 2257.357545][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 240 seconds [ 2257.571822][T26062] rock: directory entry would overflow storage [ 2257.578753][T26062] rock: sig=0x4654, size=5, remaining=4 [ 2258.747740][ T5789] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2259.066663][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2259.308686][ T5789] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2259.348768][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.361353][ T5789] usb 7-1: config 0 descriptor?? [ 2259.370821][ T5789] pwc: Askey VC010 type 2 USB webcam detected. [ 2259.477000][T26082] loop7: detected capacity change from 0 to 4096 [ 2259.673376][ T28] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2259.713663][T23829] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2259.864939][ T5789] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2259.890833][ T5789] pwc: recv_control_msg error -32 req 02 val 2700 [ 2259.921258][T23829] usb 5-1: Using ep0 maxpacket: 8 [ 2259.940648][ T5789] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2259.983418][T23829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.004103][ T5789] pwc: recv_control_msg error -32 req 04 val 1000 [ 2260.009892][ T28] usb 6-1: device descriptor read/64, error -71 [ 2260.025667][ T5789] pwc: recv_control_msg error -32 req 04 val 1300 [ 2260.036153][T23829] usb 5-1: config 0 has no interfaces? [ 2260.077147][ T5789] pwc: recv_control_msg error -32 req 04 val 1400 [ 2260.088491][T23829] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2260.122580][ T5789] pwc: recv_control_msg error -32 req 02 val 2000 [ 2260.151356][T23829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.185124][ T5789] pwc: recv_control_msg error -32 req 02 val 2100 [ 2260.302085][T23829] usb 5-1: config 0 descriptor?? [ 2260.434795][ T5789] pwc: recv_control_msg error -32 req 02 val 2500 [ 2260.570970][ T5789] pwc: recv_control_msg error -71 req 02 val 2400 [ 2260.690704][ T5789] pwc: recv_control_msg error -71 req 02 val 2600 [ 2260.771960][ T5789] pwc: recv_control_msg error -71 req 02 val 2900 [ 2260.846515][ T5789] pwc: recv_control_msg error -71 req 02 val 2800 [ 2261.074965][ T5789] pwc: recv_control_msg error -71 req 04 val 1100 [ 2261.596720][ T5789] pwc: recv_control_msg error -71 req 04 val 1200 [ 2261.774897][ T5789] pwc: Registered as video103. [ 2261.982537][ T5789] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input99 [ 2262.465721][ T5789] usb 7-1: USB disconnect, device number 21 [ 2262.854284][ T788] usb 5-1: USB disconnect, device number 11 [ 2266.438401][T26123] loop6: detected capacity change from 0 to 256 [ 2266.702690][T26125] loop6: detected capacity change from 0 to 16 [ 2266.750856][T26125] erofs: (device loop6): mounted with root inode @ nid 36. [ 2266.938187][T26118] loop4: detected capacity change from 0 to 32768 [ 2267.046901][T26118] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2267.147456][T26118] XFS (loop4): Ending clean mount [ 2267.205079][T26118] XFS (loop4): Quotacheck needed: Please wait. [ 2267.230100][T26135] loop6: detected capacity change from 0 to 16 [ 2267.253791][T26135] erofs: (device loop6): mounted with root inode @ nid 36. [ 2267.434467][T26118] XFS (loop4): Quotacheck: Done. [ 2267.593268][ T788] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 2267.822696][ T788] usb 8-1: Using ep0 maxpacket: 8 [ 2268.445833][ T788] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2268.464430][ T788] usb 8-1: config 0 has no interfaces? [ 2268.469996][ T788] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2268.494181][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.513754][ T788] usb 8-1: config 0 descriptor?? [ 2268.554788][T22781] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2269.725848][T26150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2269.924519][T21534] null_blk: rq ffff888022608000 timed out [ 2269.930336][T21534] blk_print_req_error: 36 callbacks suppressed [ 2269.930350][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2269.947652][T21534] null_blk: rq ffff888022608180 timed out [ 2269.953846][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2269.964539][T21534] null_blk: rq ffff888022608300 timed out [ 2269.972278][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2269.985719][T21534] null_blk: rq ffff888022608480 timed out [ 2269.995038][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.006066][T21534] null_blk: rq ffff888022608600 timed out [ 2270.012431][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.029780][T21534] null_blk: rq ffff888022608780 timed out [ 2270.036048][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.049573][T21534] null_blk: rq ffff888022608900 timed out [ 2270.056472][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.068925][T21534] null_blk: rq ffff888022608a80 timed out [ 2270.076986][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.088902][T21534] null_blk: rq ffff888022608c00 timed out [ 2270.095449][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.108482][T21534] null_blk: rq ffff888022608d80 timed out [ 2270.116874][T21534] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 2270.130297][T21534] null_blk: rq ffff888022608f00 timed out [ 2270.138927][T21534] null_blk: rq ffff888022609080 timed out [ 2270.146796][T21534] null_blk: rq ffff888022609200 timed out [ 2270.152601][T21534] null_blk: rq ffff888022609380 timed out [ 2270.159325][T21534] null_blk: rq ffff888022609500 timed out [ 2270.165579][T21534] null_blk: rq ffff888022609680 timed out [ 2270.171798][T21534] null_blk: rq ffff888022609800 timed out [ 2270.178354][T21534] null_blk: rq ffff888022609980 timed out [ 2270.184202][T21534] null_blk: rq ffff888022609b00 timed out [ 2270.190260][T21534] null_blk: rq ffff888022609c80 timed out [ 2270.196064][T21534] null_blk: rq ffff888022609e00 timed out [ 2270.201807][T21534] null_blk: rq ffff888022609f80 timed out [ 2270.207595][T21534] null_blk: rq ffff88802260a100 timed out [ 2270.213393][T21534] null_blk: rq ffff88802260a280 timed out [ 2270.219978][T21534] null_blk: rq ffff88802260a400 timed out [ 2270.225845][T21534] null_blk: rq ffff88802260a580 timed out [ 2270.231631][T21534] null_blk: rq ffff88802260a700 timed out [ 2270.237415][T21534] null_blk: rq ffff88802260a880 timed out [ 2270.243225][T21534] null_blk: rq ffff88802260aa00 timed out [ 2270.249008][T21534] null_blk: rq ffff88802260ab80 timed out [ 2270.254828][T21534] null_blk: rq ffff88802260ad00 timed out [ 2270.260581][T21534] null_blk: rq ffff88802260ae80 timed out [ 2270.267495][T21534] null_blk: rq ffff88802260b000 timed out [ 2270.273335][T21534] null_blk: rq ffff88802260b180 timed out [ 2270.279799][T21534] null_blk: rq ffff88802260b300 timed out [ 2270.285628][T21534] null_blk: rq ffff88802260b480 timed out [ 2270.291347][T21534] null_blk: rq ffff88802260b600 timed out [ 2270.297150][T21534] null_blk: rq ffff88802260b780 timed out [ 2270.302872][T21534] null_blk: rq ffff88802260b900 timed out [ 2270.309018][T21534] null_blk: rq ffff88802260ba80 timed out [ 2270.314825][T21534] null_blk: rq ffff88802260bc00 timed out [ 2270.372446][T21534] null_blk: rq ffff88802260bd80 timed out [ 2270.378377][T21534] null_blk: rq ffff88802260bf00 timed out [ 2270.384999][T21534] null_blk: rq ffff88802260c080 timed out [ 2270.390733][T21534] null_blk: rq ffff88802260c200 timed out [ 2270.396622][T21534] null_blk: rq ffff88802260c380 timed out [ 2270.402370][T21534] null_blk: rq ffff88802260c500 timed out [ 2270.408823][T21534] null_blk: rq ffff88802260c680 timed out [ 2270.414636][T21534] null_blk: rq ffff88802260c800 timed out [ 2270.420409][T21534] null_blk: rq ffff88802260c980 timed out [ 2270.426214][T21534] null_blk: rq ffff88802260cb00 timed out [ 2270.431977][T21534] null_blk: rq ffff88802260cc80 timed out [ 2270.438336][T21534] null_blk: rq ffff88802260ce00 timed out [ 2270.444191][T21534] null_blk: rq ffff88802260cf80 timed out [ 2270.449945][T21534] null_blk: rq ffff88802260d100 timed out [ 2270.455868][T21534] null_blk: rq ffff88802260d280 timed out [ 2270.461605][T21534] null_blk: rq ffff88802260d400 timed out [ 2270.467376][T21534] null_blk: rq ffff88802260d580 timed out [ 2270.473101][T21534] null_blk: rq ffff88802260d700 timed out [ 2270.478905][T21534] null_blk: rq ffff88802260d880 timed out [ 2270.485484][T21534] null_blk: rq ffff88802260da00 timed out [ 2270.491255][T21534] null_blk: rq ffff88802260db80 timed out [ 2270.497018][T21534] null_blk: rq ffff88802260dd00 timed out [ 2270.502739][T21534] null_blk: rq ffff88802260de80 timed out [ 2272.026712][ T788] usb 8-1: USB disconnect, device number 62 [ 2272.324679][T26156] loop5: detected capacity change from 0 to 32768 [ 2272.370546][T26156] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2273.540562][T26156] XFS (loop5): Ending clean mount [ 2273.682793][T26156] XFS (loop5): Quotacheck needed: Please wait. [ 2274.575357][T26156] XFS (loop5): Quotacheck: Done. [ 2274.765891][T26197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2275.075837][T23384] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2275.706672][T26193] loop4: detected capacity change from 0 to 32768 [ 2275.778136][T26193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5374 (26193) [ 2275.840238][T26201] loop5: detected capacity change from 0 to 2048 [ 2275.876281][T26202] loop7: detected capacity change from 0 to 2048 [ 2275.891947][T26201] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2275.961706][T26202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2275.970710][T26193] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2275.983256][T26201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2276.049390][T26193] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 2276.094556][T26193] BTRFS info (device loop4): enabling auto defrag [ 2276.101251][T26193] BTRFS info (device loop4): using free space tree [ 2276.113331][ T27] audit: type=1800 audit(1762243360.724:47): pid=26202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5377" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 2276.495904][T26193] BTRFS info (device loop4): enabling ssd optimizations [ 2276.509013][T26219] loop5: detected capacity change from 0 to 128 [ 2276.522225][T26193] BTRFS info (device loop4): auto enabling async discard [ 2276.642774][T26219] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2276.754476][T26219] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2276.790926][T22781] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2276.955313][T23384] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2278.584118][T26242] loop6: detected capacity change from 0 to 16 [ 2278.613603][T26242] erofs: (device loop6): mounted with root inode @ nid 36. [ 2279.387838][T26250] blktrace: Concurrent blktraces are not allowed on loop10 [ 2279.943546][ T28] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2280.133254][ T28] usb 5-1: device descriptor read/64, error -71 [ 2280.432876][ T28] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2280.629077][ T28] usb 5-1: device descriptor read/64, error -71 [ 2280.764055][ T28] usb usb5-port1: attempt power cycle [ 2281.453691][ T28] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2281.963608][ T28] usb 5-1: device descriptor read/8, error -71 [ 2282.005613][T26273] loop4: detected capacity change from 0 to 16 [ 2282.015409][T26273] erofs: (device loop4): mounted with root inode @ nid 36. [ 2282.155968][T26262] loop5: detected capacity change from 0 to 32768 [ 2282.722901][T26262] JBD2: Ignoring recovery information on journal [ 2283.000493][T26262] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2283.174941][T23384] ocfs2: Unmounting device (7,5) on (node local) [ 2283.340393][T26290] loop6: detected capacity change from 0 to 256 [ 2283.366642][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.647285][T26291] blktrace: Concurrent blktraces are not allowed on loop10 [ 2284.122492][T26286] loop4: detected capacity change from 0 to 32768 [ 2284.177187][T26286] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 2284.243706][T26286] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2286.465900][T22781] ocfs2: Unmounting device (7,4) on (node local) [ 2287.849291][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 270 seconds [ 2288.076901][T26317] loop4: detected capacity change from 0 to 16 [ 2288.085697][T26317] erofs: (device loop4): mounted with root inode @ nid 36. [ 2288.417160][T26321] loop7: detected capacity change from 0 to 256 [ 2290.076113][T26334] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2290.394307][T26326] netlink: 173 bytes leftover after parsing attributes in process `syz.4.5407'. [ 2291.684025][T26346] blktrace: Concurrent blktraces are not allowed on loop12 [ 2293.718316][T26362] loop5: detected capacity change from 0 to 16 [ 2293.762359][T26355] loop7: detected capacity change from 0 to 40427 [ 2293.790677][T26362] erofs: (device loop5): mounted with root inode @ nid 36. [ 2293.927952][T26355] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 2294.002739][T26355] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2294.158772][T26355] F2FS-fs (loop7): invalid crc value [ 2295.271798][T26355] F2FS-fs (loop7): Found nat_bits in checkpoint [ 2296.402143][T26377] loop5: detected capacity change from 0 to 32768 [ 2296.534017][T26377] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 2296.590867][T26377] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2297.448269][T26393] loop6: detected capacity change from 0 to 256 [ 2297.484969][T26393] exfat: Deprecated parameter 'namecase' [ 2297.515236][T26393] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2297.602509][T26393] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 2297.645183][T26384] loop4: detected capacity change from 0 to 32768 [ 2297.727841][T26384] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 2297.836409][T26384] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 2297.913042][T26384] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2297.950203][T15016] (kworker/u4:3,15016,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 2298.116070][T22781] ocfs2: Unmounting device (7,4) on (node local) [ 2298.307866][T26400] blktrace: Concurrent blktraces are not allowed on loop12 [ 2298.572989][T23384] ocfs2: Unmounting device (7,5) on (node local) [ 2298.621580][T26402] loop4: detected capacity change from 0 to 16 [ 2298.703636][T26394] loop7: detected capacity change from 0 to 40427 [ 2298.712873][T26402] erofs: (device loop4): mounted with root inode @ nid 36. [ 2298.750854][T26394] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x7ffff [ 2300.384895][T23829] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2300.659975][T23829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.708482][T23829] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2300.744444][T23829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.801924][T23829] usb 6-1: config 0 descriptor?? [ 2300.825337][T23829] pwc: Askey VC010 type 2 USB webcam detected. [ 2300.989322][T26418] loop7: detected capacity change from 0 to 4096 [ 2301.238096][T23829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2301.257627][T23829] pwc: recv_control_msg error -32 req 02 val 2700 [ 2301.275933][T23829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2301.294714][T23829] pwc: recv_control_msg error -32 req 04 val 1000 [ 2301.309603][T23829] pwc: recv_control_msg error -32 req 04 val 1300 [ 2301.323892][T23829] pwc: recv_control_msg error -32 req 04 val 1400 [ 2301.343562][T23829] pwc: recv_control_msg error -32 req 02 val 2000 [ 2301.352087][T23829] pwc: recv_control_msg error -32 req 02 val 2100 [ 2301.399533][T26416] loop4: detected capacity change from 0 to 40427 [ 2301.434247][T26416] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 2301.442893][T26416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 2301.451662][T26416] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 2301.579202][T23829] pwc: recv_control_msg error -32 req 02 val 2500 [ 2301.613680][T23829] pwc: recv_control_msg error -71 req 02 val 2400 [ 2301.641644][T23829] pwc: recv_control_msg error -71 req 02 val 2600 [ 2301.671986][T23829] pwc: recv_control_msg error -71 req 02 val 2900 [ 2301.690968][T23829] pwc: recv_control_msg error -71 req 02 val 2800 [ 2301.707659][T23829] pwc: recv_control_msg error -71 req 04 val 1100 [ 2301.760350][T23829] pwc: recv_control_msg error -71 req 04 val 1200 [ 2301.906271][T23829] pwc: Registered as video103. [ 2301.912912][T23829] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input100 [ 2302.111160][T26434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2302.483425][T23829] usb 6-1: USB disconnect, device number 28 [ 2303.534702][T26427] loop6: detected capacity change from 0 to 32768 [ 2303.618509][T26427] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2303.650941][T26446] blktrace: Concurrent blktraces are not allowed on loop8 [ 2303.774037][T26436] loop5: detected capacity change from 0 to 40427 [ 2303.777869][T26427] XFS (loop6): Ending clean mount [ 2303.828702][T26436] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 2303.847725][T26427] XFS (loop6): Quotacheck needed: Please wait. [ 2303.876221][T26436] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 2303.885781][T26436] F2FS-fs (loop5): Image doesn't support compression [ 2303.899433][T26436] F2FS-fs (loop5): invalid crc value [ 2303.908033][T26436] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2304.006355][T26436] F2FS-fs (loop5): Start checkpoint disabled! [ 2304.052317][T26436] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 2304.144042][T26427] XFS (loop6): Quotacheck: Done. [ 2304.401216][T22532] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2304.471285][ T27] audit: type=1800 audit(1762243389.114:48): pid=26436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5438" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 2304.511178][T26436] F2FS-fs (loop5): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 2304.535948][T26436] syz.5.5438: attempt to access beyond end of device [ 2304.535948][T26436] loop5: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 2304.652003][T25023] kworker/u4:0: attempt to access beyond end of device [ 2304.652003][T25023] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2304.682431][T25023] F2FS-fs (loop5): Remounting filesystem read-only [ 2304.694702][T25023] F2FS-fs (loop5): Remounting filesystem read-only [ 2305.266861][T23829] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2305.433332][T23829] usb 6-1: device descriptor read/64, error -71 [ 2305.734075][T23829] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2305.841441][T26460] loop4: detected capacity change from 0 to 32768 [ 2305.864151][T26460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5445 (26460) [ 2305.903510][T23829] usb 6-1: device descriptor read/64, error -71 [ 2305.941309][T26460] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2305.972404][T26460] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2305.993003][T26460] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2306.013129][T26462] loop7: detected capacity change from 0 to 32768 [ 2306.018780][T26464] loop6: detected capacity change from 0 to 1024 [ 2306.033307][T26460] BTRFS info (device loop4): trying to use backup root at mount time [ 2306.045645][T23829] usb usb6-port1: attempt power cycle [ 2306.058677][T26460] BTRFS info (device loop4): setting nodatasum [ 2306.068607][T26460] BTRFS info (device loop4): disabling tree log [ 2306.104478][T26464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2306.113701][T26462] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 2306.127157][T26460] BTRFS info (device loop4): turning on flush-on-commit [ 2306.152866][T26460] BTRFS info (device loop4): enabling disk space caching [ 2306.189186][T26460] BTRFS error (device loop4): cannot disable free space tree [ 2306.208173][T26462] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2306.230662][T26464] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 2306.293828][T26460] BTRFS error (device loop4): open_ctree failed: -22 [ 2306.305320][T26462] XFS (loop7): Ending clean mount [ 2306.313811][T26462] XFS (loop7): Quotacheck needed: Please wait. [ 2306.370480][T20008] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 2306.382385][T20008] XFS (loop7): Unmount and run xfs_repair [ 2306.388267][T20008] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 2306.396086][T20008] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 2306.406694][T20008] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 2306.415817][T20008] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 2306.425196][T20008] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 2306.437078][T20008] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 2306.446357][T20008] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 2306.455696][T20008] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2306.465168][T20008] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2306.493364][T23829] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2306.512220][T15016] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 2306.536201][T23829] usb 6-1: device descriptor read/8, error -71 [ 2306.562527][T26462] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 2307.019449][ T28] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 2307.344562][ T28] XFS (loop7): Unmount and run xfs_repair [ 2307.423295][T23620] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2307.433248][ T28] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 2307.441212][ T28] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 2307.452649][ T28] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 2307.462873][ T28] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 2307.472973][ T28] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 2307.498906][ T28] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 2307.508432][ T28] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 2307.531468][T23829] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2307.543511][ T28] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2307.579143][ T28] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2307.583737][T23829] usb 6-1: device descriptor read/8, error -71 [ 2307.620061][ T28] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 2307.638004][T26482] loop4: detected capacity change from 0 to 2048 [ 2307.654028][ T28] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 2307.682677][ T28] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 2307.696765][T26482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2307.724205][T23829] usb usb6-port1: unable to enumerate USB device [ 2307.789056][T26482] EXT4-fs (loop4): shut down requested (1) [ 2307.896932][T22781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2308.024105][T26464] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 2308.104247][T26485] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 2308.194998][T22532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2308.290138][T26491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2309.012627][T26497] loop6: detected capacity change from 0 to 2048 [ 2309.106080][T26497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2309.465023][T26490] loop5: detected capacity change from 0 to 32768 [ 2309.629833][T26490] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 2309.674556][T26490] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2309.731671][T26504] loop4: detected capacity change from 0 to 1024 [ 2309.741263][T15016] (kworker/u4:3,15016,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 2309.741643][T26504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2309.803031][T26504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2309.912237][T23384] ocfs2: Unmounting device (7,5) on (node local) [ 2309.972436][T26511] blktrace: Concurrent blktraces are not allowed on loop14 [ 2310.231805][T26513] loop5: detected capacity change from 0 to 2048 [ 2310.282128][T26513] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2310.408255][T26513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2313.116600][T22781] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2313.273486][ T28] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 2313.443841][ T28] usb 8-1: device descriptor read/64, error -71 [ 2313.723387][ T28] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2313.923459][ T28] usb 8-1: device descriptor read/64, error -71 [ 2314.063593][ T28] usb usb8-port1: attempt power cycle [ 2314.239770][T26530] loop6: detected capacity change from 0 to 32768 [ 2314.266695][T26530] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.5462 (26530) [ 2314.267953][T26534] loop4: detected capacity change from 0 to 1024 [ 2314.301415][T26530] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2314.322494][T26530] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 2314.337858][T26530] BTRFS info (device loop6): using free space tree [ 2314.494920][T26530] BTRFS info (device loop6): enabling ssd optimizations [ 2314.503802][ T28] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 2314.524529][T26530] BTRFS info (device loop6): auto enabling async discard [ 2314.580354][ T28] usb 8-1: device descriptor read/8, error -71 [ 2314.774320][ T42] hfsplus: b-tree write err: -5, ino 3 [ 2314.863837][ T28] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2314.934554][ T28] usb 8-1: device descriptor read/8, error -71 [ 2315.009284][T26553] loop4: detected capacity change from 0 to 1024 [ 2315.063592][ T28] usb usb8-port1: unable to enumerate USB device [ 2315.221568][T26555] loop5: detected capacity change from 0 to 512 [ 2315.230836][T18480] hfsplus: b-tree write err: -5, ino 3 [ 2315.247657][T22781] hfsplus: node 4:3 still has 1 user(s)! [ 2315.266285][T26555] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 2315.269572][T22532] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2316.710798][T26562] blktrace: Concurrent blktraces are not allowed on loop10 [ 2317.125494][T26566] loop7: detected capacity change from 0 to 2048 [ 2317.195727][T26566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2317.363950][T26566] overlayfs: upper fs needs to support d_type. [ 2317.410665][T26566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2317.444724][T26566] overlayfs: failed to set xattr on upper [ 2317.448486][T26569] syzkaller0: entered promiscuous mode [ 2317.473358][T26569] syzkaller0: entered allmulticast mode [ 2317.488269][T26566] overlayfs: ...falling back to redirect_dir=nofollow. [ 2317.511816][T26566] overlayfs: ...falling back to index=off. [ 2317.538730][T26566] overlayfs: ...falling back to uuid=null. [ 2317.560944][T26566] overlayfs: overlapping lowerdir path [ 2317.918048][T26573] loop7: detected capacity change from 0 to 4096 [ 2317.994420][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 300 seconds [ 2318.910404][T26580] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2319.280101][T26573] NILFS error (device loop7): nilfs_dotdot: directory #12 missing '.' [ 2319.394512][T26573] Remounting filesystem read-only [ 2319.521571][T23620] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 2319.536869][T23620] NILFS (loop7): discard dirty page: offset=0, ino=18 [ 2319.546472][T23620] NILFS (loop7): discard dirty block: blocknr=0, size=4096 [ 2319.557457][T23620] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 2319.564800][T23620] NILFS (loop7): discard dirty block: blocknr=14, size=4096 [ 2319.576421][T23620] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 2319.592392][T23620] NILFS (loop7): discard dirty block: blocknr=23, size=4096 [ 2319.622720][T23620] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 2319.694333][T23620] NILFS (loop7): discard dirty block: blocknr=24, size=4096 [ 2319.702332][T23620] NILFS (loop7): discard dirty page: offset=8192, ino=6 [ 2319.733433][T23620] NILFS (loop7): discard dirty block: blocknr=25, size=4096 [ 2319.754017][T23620] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 2319.762020][T23620] NILFS (loop7): discard dirty block: blocknr=28, size=4096 [ 2319.776422][T23620] NILFS (loop7): discard dirty page: offset=4096, ino=3 [ 2319.785153][T23620] NILFS (loop7): discard dirty block: blocknr=29, size=4096 [ 2319.792957][T23620] NILFS (loop7): discard dirty page: offset=270336, ino=3 [ 2319.824335][T23620] NILFS (loop7): discard dirty block: blocknr=0, size=4096 [ 2320.183065][T26593] loop7: detected capacity change from 0 to 4096 [ 2320.193981][T26593] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 2320.307486][T26593] ntfs3: loop7: ino=5, "/" directory corrupted [ 2320.353346][ T28] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2320.533410][ T28] usb 6-1: device descriptor read/64, error -71 [ 2320.591844][T26585] loop6: detected capacity change from 0 to 40427 [ 2320.615261][T26585] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 2320.631533][T26585] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2320.688761][T26585] F2FS-fs (loop6): invalid crc value [ 2320.712068][T26585] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2320.893465][ T28] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2321.083593][ T28] usb 6-1: device descriptor read/64, error -71 [ 2321.088589][T26602] syzkaller0: entered promiscuous mode [ 2321.180394][T26602] syzkaller0: entered allmulticast mode [ 2321.204697][ T28] usb usb6-port1: attempt power cycle [ 2321.228322][T26585] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2321.277829][T26585] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 2321.287043][ C0] vkms_vblank_simulate: vblank timer overrun [ 2321.450271][T26585] syz.6.5475: attempt to access beyond end of device [ 2321.450271][T26585] loop6: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 2321.475806][T26585] syz.6.5475: attempt to access beyond end of device [ 2321.475806][T26585] loop6: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 2321.510225][T26585] F2FS-fs (loop6): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 2321.518887][T26585] F2FS-fs (loop6): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 2321.670451][ T28] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2321.683562][ T788] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2321.715433][ T28] usb 6-1: device descriptor read/8, error -71 [ 2322.017219][ T788] usb 8-1: device descriptor read/64, error -71 [ 2322.867164][T26611] loop4: detected capacity change from 0 to 32768 [ 2322.881156][ T28] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2322.897858][T26611] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.5484 (26611) [ 2322.921310][T26615] loop6: detected capacity change from 0 to 256 [ 2322.973410][ T788] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2322.982212][ T28] usb 6-1: device descriptor read/8, error -71 [ 2323.009057][T26615] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 2323.022148][T26611] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 2323.053127][T26611] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 2323.064477][T26611] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 2323.103245][T26611] BTRFS info (device loop4): use lzo compression, level 0 [ 2323.120452][ T28] usb usb6-port1: unable to enumerate USB device [ 2323.137154][T26611] BTRFS info (device loop4): using free space tree [ 2323.163342][ T788] usb 8-1: device descriptor read/64, error -71 [ 2323.283567][ T788] usb usb8-port1: attempt power cycle [ 2323.441394][T26611] BTRFS info (device loop4): enabling ssd optimizations [ 2323.453458][T26611] BTRFS info (device loop4): auto enabling async discard [ 2324.223264][ T788] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2324.265033][T26640] loop5: detected capacity change from 0 to 1024 [ 2324.274423][ T788] usb 8-1: device descriptor read/8, error -71 [ 2324.387435][T22781] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 2324.695149][T26644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2325.105455][T26647] loop5: detected capacity change from 0 to 512 [ 2325.155200][T26647] EXT4-fs: Ignoring removed bh option [ 2325.206853][T26649] overlayfs: failed to resolve './file0': -2 [ 2325.323641][T26647] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2325.345421][T26647] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 2325.375298][T26647] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 2325.433703][T26651] syzkaller0: entered promiscuous mode [ 2325.450077][T26647] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 2325.488320][T26647] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 2325.490149][T26651] syzkaller0: entered allmulticast mode [ 2325.502219][T26647] System zones: 0-2, 18-18, 34-35 [ 2325.589884][T26647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2325.900939][T26647] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.5491: path /: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 2326.857977][T23384] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2327.023371][ T788] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 2327.123313][T14219] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2327.223339][ T788] usb 8-1: Using ep0 maxpacket: 32 [ 2327.232177][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.247538][ T788] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2327.257734][ T788] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2327.266967][ T788] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.314540][ T788] usb 8-1: config 0 descriptor?? [ 2327.333936][T14219] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2327.342602][T14219] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.382966][T14219] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2327.393891][T14219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2327.405270][T14219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2327.421813][T14219] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2327.431275][T14219] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2327.439649][T14219] usb 5-1: Product: syz [ 2327.444020][T14219] usb 5-1: Manufacturer: syz [ 2327.472955][T14219] cdc_wdm 5-1:1.0: skipping garbage [ 2327.478879][T14219] cdc_wdm 5-1:1.0: skipping garbage [ 2327.496325][T14219] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2327.502326][T14219] cdc_wdm 5-1:1.0: Unknown control protocol [ 2327.542220][T26664] loop5: detected capacity change from 0 to 32768 [ 2327.703263][T26662] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 2327.784142][ T788] usbhid 8-1:0.0: can't add hid device: -32 [ 2327.791320][ T788] usbhid: probe of 8-1:0.0 failed with error -32 [ 2327.906505][T20008] usb 5-1: USB disconnect, device number 16 [ 2328.173286][ T5789] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2328.278082][ T27] audit: type=1800 audit(1762243412.924:49): pid=26664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5496" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 2328.417584][ T5789] usb 7-1: device descriptor read/64, error -71 [ 2328.713432][ T5789] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2328.759335][T26672] netlink: 173 bytes leftover after parsing attributes in process `syz.5.5498'. [ 2328.863347][ T5789] usb 7-1: device descriptor read/64, error -71 [ 2329.110403][T26677] loop5: detected capacity change from 0 to 16 [ 2329.227339][T26677] erofs: (device loop5): mounted with root inode @ nid 36. [ 2329.501687][T26677] overlayfs: failed to resolve './file1': -2 [ 2330.139486][ T5789] usb usb7-port1: attempt power cycle [ 2330.468212][ T788] usb 8-1: USB disconnect, device number 71 [ 2331.374596][T26681] loop7: detected capacity change from 0 to 1024 [ 2331.424384][T26684] loop5: detected capacity change from 0 to 2048 [ 2331.438582][T26684] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2331.489317][T26683] syzkaller0: entered promiscuous mode [ 2331.508587][T26683] syzkaller0: entered allmulticast mode [ 2331.512133][T26684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2331.532141][ T7314] hfsplus: b-tree write err: -5, ino 3 [ 2331.618976][T23620] hfsplus: node 4:3 still has 2 user(s)! [ 2331.759379][T26687] loop7: detected capacity change from 0 to 128 [ 2331.921224][T26692] loop6: detected capacity change from 0 to 128 [ 2331.954689][T26690] blktrace: Concurrent blktraces are not allowed on loop10 [ 2332.691580][T26697] loop7: detected capacity change from 0 to 2048 [ 2332.708996][T26697] UDF-fs: bad mount option "lastblock=00000000Öv“00000002" or missing value [ 2334.664679][T26697] loop7: detected capacity change from 0 to 32768 [ 2335.269996][T26718] syzkaller0: entered promiscuous mode [ 2335.275835][T26718] syzkaller0: entered allmulticast mode [ 2335.457736][T26716] loop7: detected capacity change from 0 to 32768 [ 2335.489430][T26716] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.5513 (26716) [ 2335.553601][T26716] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2335.565846][T26722] loop5: detected capacity change from 0 to 4096 [ 2335.576552][T26716] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 2335.588463][T26716] BTRFS info (device loop7): using free space tree [ 2335.642156][T23987] blk_print_req_error: 54 callbacks suppressed [ 2335.642175][T23987] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2335.773830][T26720] loop5: detected capacity change from 0 to 256 [ 2335.791137][T23987] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2335.908553][T26716] BTRFS info (device loop7): enabling ssd optimizations [ 2335.953328][T26716] BTRFS info (device loop7): auto enabling async discard [ 2336.210404][T26744] loop5: detected capacity change from 0 to 2048 [ 2336.331808][T26744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2336.707745][T26725] loop6: detected capacity change from 0 to 40427 [ 2336.734843][T26725] F2FS-fs (loop6): build fault injection attr: rate: 25, type: 0x7ffff [ 2336.775867][T26725] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7698c [ 2336.809758][T26749] random: crng reseeded on system resumption [ 2336.862767][T26725] F2FS-fs (loop6): invalid crc value [ 2336.891207][T26725] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 2336.948467][T26725] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2337.047370][T26725] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 2337.070846][T23620] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2337.157428][T26725] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2337.299913][T26725] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x4ef/0x1020 [ 2337.933336][ C1] F2FS-fs (loop6): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40 [ 2337.945204][ C1] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 2337.952721][T22532] F2FS-fs (loop6): do_checkpoint failed err:-5, stop checkpoint [ 2338.413518][ T5789] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2338.573308][ T5789] usb 8-1: device descriptor read/64, error -71 [ 2338.783631][T26768] syzkaller0: entered promiscuous mode [ 2338.807510][T26768] syzkaller0: entered allmulticast mode [ 2338.843357][ T5789] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 2339.016217][ T5789] usb 8-1: device descriptor read/64, error -71 [ 2339.153474][ T5789] usb usb8-port1: attempt power cycle [ 2339.593306][ T5789] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2341.801836][ T5789] usb 8-1: device descriptor read/8, error -71 [ 2342.047324][T26783] loop7: detected capacity change from 0 to 2048 [ 2342.086841][T26783] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2342.228195][T26786] blktrace: Concurrent blktraces are not allowed on loop10 [ 2342.652988][T26793] syzkaller0: entered promiscuous mode [ 2342.668875][T26793] syzkaller0: entered allmulticast mode [ 2342.809640][T26789] loop4: detected capacity change from 0 to 32768 [ 2342.929309][T26789] (syz.4.5531,26789,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2342.968128][T26789] (syz.4.5531,26789,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2343.027578][T26789] JBD2: Ignoring recovery information on journal [ 2343.106314][T26789] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2343.378414][T22781] ocfs2: Unmounting device (7,4) on (node local) [ 2344.811206][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.893298][ T788] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2345.103262][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 2345.117115][ T788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.128382][ T788] usb 6-1: config 0 has no interfaces? [ 2345.139969][ T788] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2345.162638][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.183425][ T788] usb 6-1: config 0 descriptor?? [ 2346.152540][T26829] loop7: detected capacity change from 0 to 2048 [ 2346.315539][T26829] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2346.903780][T26836] loop4: detected capacity change from 0 to 2048 [ 2346.922202][T26836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2346.963113][ T27] audit: type=1800 audit(1762243431.604:50): pid=26836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5546" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 2347.245614][T26839] blktrace: Concurrent blktraces are not allowed on loop14 [ 2347.985693][ T788] usb 6-1: USB disconnect, device number 37 [ 2348.503273][ T5789] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2348.653466][T22252] block nbd0: Possible stuck request ffff888021c70000: control (read@0,4096B). Runtime 330 seconds [ 2348.703307][ T5789] usb 7-1: Using ep0 maxpacket: 32 [ 2348.719914][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2348.731018][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2348.741411][ T5789] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2348.750823][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.768432][ T5789] usb 7-1: config 0 descriptor?? [ 2349.496560][ T5789] usbhid 7-1:0.0: can't add hid device: -32 [ 2349.502634][ T5789] usbhid: probe of 7-1:0.0 failed with error -32 [ 2350.681019][T26873] blktrace: Concurrent blktraces are not allowed on loop8 [ 2350.733497][ T5789] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2350.916946][ T5789] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2350.940587][ T5789] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2350.951923][ T5789] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2350.962043][ T5789] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2350.975318][ T5789] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.011638][ T788] usb 7-1: USB disconnect, device number 25 [ 2351.020111][ T5789] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2351.049615][ T5789] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2351.086582][ T5789] usb 8-1: Product: syz [ 2351.109786][ T5789] usb 8-1: Manufacturer: syz [ 2351.115059][T26878] overlayfs: failed to resolve './file0': -2 [ 2351.144280][ T5789] cdc_wdm 8-1:1.0: skipping garbage [ 2351.150043][ T5789] cdc_wdm 8-1:1.0: skipping garbage [ 2351.159005][ T5789] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2351.165729][ T5789] cdc_wdm 8-1:1.0: Unknown control protocol [ 2351.743547][T26868] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 2351.761132][ T788] usb 8-1: USB disconnect, device number 76 [ 2353.455429][T26891] loop7: detected capacity change from 0 to 32768 [ 2353.658217][T26891] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2353.762995][T26891] XFS (loop7): Ending clean mount [ 2353.801890][T26891] XFS (loop7): Quotacheck needed: Please wait. [ 2353.894434][T26891] XFS (loop7): Quotacheck: Done. [ 2354.961447][T23620] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2356.232208][T26924] blktrace: Concurrent blktraces are not allowed on loop8 [ 2358.136022][T26940] overlayfs: failed to resolve './file0': -2 [ 2358.507652][T26947] loop5: detected capacity change from 0 to 2048 [ 2358.536515][T26947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2358.644643][T26947] overlayfs: failed to resolve './file1/file0': -2 [ 2360.019031][T26962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2360.744953][ T5789] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2360.827096][T26968] blktrace: Concurrent blktraces are not allowed on loop12 [ 2360.973647][ T5789] usb 6-1: Using ep0 maxpacket: 8 [ 2360.980751][ T5789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2361.018106][ T5789] usb 6-1: config 0 has no interfaces? [ 2361.025061][ T5789] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2361.036692][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.053581][ T28] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2361.059373][ T5789] usb 6-1: config 0 descriptor?? [ 2361.223373][ T28] usb 5-1: device descriptor read/64, error -71 [ 2361.503390][ T28] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2361.873447][ T28] usb 5-1: device descriptor read/64, error -71 [ 2362.053730][ T28] usb usb5-port1: attempt power cycle [ 2362.503446][ T28] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2362.555486][ T28] usb 5-1: device descriptor read/8, error -71 [ 2362.871198][ T28] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2363.183651][ T28] usb 5-1: device not accepting address 20, error -71 [ 2363.967908][ T28] usb usb5-port1: unable to enumerate USB device [ 2364.361881][T20008] usb 6-1: USB disconnect, device number 38 [ 2365.934080][T27008] loop4: detected capacity change from 0 to 2048 [ 2365.987112][T27008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2366.028695][T27008] overlayfs: failed to resolve './file1/file0': -2 [ 2366.213527][ T28] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2366.300869][T27020] loop4: detected capacity change from 0 to 16 [ 2366.324323][T27020] erofs: (device loop4): mounted with root inode @ nid 36. [ 2366.383329][ T28] usb 6-1: device descriptor read/64, error -71 [ 2366.663430][ T28] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2366.833386][ T28] usb 6-1: device descriptor read/64, error -71 [ 2366.975399][ T28] usb usb6-port1: attempt power cycle [ 2367.393331][ T28] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2367.426079][ T28] usb 6-1: device descriptor read/8, error -71 [ 2367.716821][ T28] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2367.754545][ T28] usb 6-1: device descriptor read/8, error -71 [ 2367.881711][ T28] usb usb6-port1: unable to enumerate USB device [ 2369.984928][T27051] loop5: detected capacity change from 0 to 16 [ 2370.035079][T27051] erofs: (device loop5): mounted with root inode @ nid 36. [ 2372.290841][T27073] blktrace: Concurrent blktraces are not allowed on loop12 [ 2372.443248][ T28] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2372.603452][ T28] usb 6-1: device descriptor read/64, error -71 [ 2372.903651][ T28] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2372.964515][ T29] INFO: task udevd:23493 blocked for more than 143 seconds. [ 2373.343376][ T29] Not tainted syzkaller #0 [ 2373.349388][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2373.360209][ T29] task:udevd state:D stack:25712 pid:23493 ppid:5158 flags:0x00004006 [ 2373.371201][ T29] Call Trace: [ 2373.379802][ T29] [ 2373.388161][ T29] __schedule+0x14d2/0x44d0 [ 2373.394016][ T29] ? asan.module_dtor+0x20/0x20 [ 2373.404049][ T29] ? mark_lock+0x94/0x320 [ 2373.409673][ T29] ? lock_chain_count+0x20/0x20 [ 2373.414955][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 2373.421075][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 2373.428932][ T29] schedule+0xbd/0x170 [ 2373.433119][ T29] io_schedule+0x80/0xd0 [ 2373.437760][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 2373.443548][ T29] ? folio_wait_bit+0x30/0x30 [ 2373.449092][ T29] ? _compound_head+0x120/0x120 [ 2373.455912][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2373.461127][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 2373.466854][ T29] ? blkdev_writepage+0x30/0x30 [ 2373.471821][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 2373.482191][ T29] ? blkdev_writepage+0x30/0x30 [ 2373.487601][ T29] read_part_sector+0xd2/0x350 [ 2373.492486][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 2373.499755][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 2373.506074][ T29] ? put_partition+0x350/0x350 [ 2373.511301][ T29] ? alloc_pages+0x4dc/0x740 [ 2373.516325][ T29] bdev_disk_changed+0x73a/0x1410 [ 2373.521598][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2373.523357][ T28] usb 6-1: device descriptor read/64, error -71 [ 2373.527359][ T29] ? iput+0x347/0x920 [ 2373.537479][ T29] blkdev_get_whole+0x30d/0x390 [ 2373.542468][ T29] blkdev_get_by_dev+0x279/0x600 [ 2373.547813][ T29] blkdev_open+0x152/0x360 [ 2373.552410][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2373.557395][ T29] do_dentry_open+0x8c6/0x1500 [ 2373.562305][ T29] path_openat+0x274b/0x3190 [ 2373.567071][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 2373.572179][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.578524][ T29] ? verify_lock_unused+0x140/0x140 [ 2373.584870][ T29] ? do_filp_open+0x3d0/0x3d0 [ 2373.589699][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2373.595040][ T29] do_filp_open+0x1c5/0x3d0 [ 2373.599614][ T29] ? vfs_tmpfile+0x490/0x490 [ 2373.606277][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2373.611317][ T29] ? alloc_fd+0x58f/0x630 [ 2373.617333][ T29] do_sys_openat2+0x12c/0x1c0 [ 2373.628687][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 2373.635554][ T29] ? do_sys_open+0xe0/0xe0 [ 2373.640450][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2373.646707][ T29] ? lock_chain_count+0x20/0x20 [ 2373.652050][ T29] __x64_sys_openat+0x139/0x160 [ 2373.657142][ T29] do_syscall_64+0x55/0xb0 [ 2373.661739][ T29] ? clear_bhb_loop+0x40/0x90 [ 2373.666958][ T29] ? clear_bhb_loop+0x40/0x90 [ 2373.671745][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.677510][ T28] usb usb6-port1: attempt power cycle [ 2373.678182][ T29] RIP: 0033:0x7f483dca7407 [ 2373.687959][ T29] RSP: 002b:00007ffe78aeb190 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2373.701871][ T29] RAX: ffffffffffffffda RBX: 00007f483e4a7880 RCX: 00007f483dca7407 [ 2373.711000][ T29] RDX: 00000000000a0800 RSI: 00005617d415ac90 RDI: ffffffffffffff9c [ 2373.719341][ T29] RBP: 00005617d414a910 R08: 0000000000000000 R09: 0000000000000000 [ 2373.728546][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005617d416f970 [ 2373.736951][ T29] R13: 00005617d4162410 R14: 0000000000000000 R15: 00005617d416f970 [ 2373.747180][ T29] [ 2373.750595][ T29] [ 2373.750595][ T29] Showing all locks held in the system: [ 2373.758884][ T29] 3 locks held by kworker/u4:1/12: [ 2373.764847][ T29] 6 locks held by kworker/1:1/28: [ 2373.773610][ T29] #0: ffff88801b6bc938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2373.786915][ T29] #1: ffffc90000a4fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 2373.815513][ T29] #2: ffff8881433ef190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x49c0 [ 2373.826693][ T29] #3: ffff88814370a508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21ab/0x49c0 [ 2373.838104][ T29] #4: ffff888142ff8c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21d3/0x49c0 [ 2373.853067][ T29] #5: ffffffff8d8be830 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x164/0x1740 [ 2373.866354][ T29] 1 lock held by khungtaskd/29: [ 2373.871270][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2373.881795][ T29] 2 locks held by getty/19703: [ 2373.886917][ T29] #0: ffff88814c8930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2373.897750][ T29] #1: ffffc9000f78d2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 2373.910121][ T29] 1 lock held by udevd/23493: [ 2373.916706][ T29] #0: ffff88814174a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2373.928284][ T29] [ 2373.930654][ T29] ============================================= [ 2373.930654][ T29] [ 2373.939941][ T29] NMI backtrace for cpu 0 [ 2373.944309][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2373.951522][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2373.961570][ T29] Call Trace: [ 2373.964841][ T29] [ 2373.967763][ T29] dump_stack_lvl+0x16c/0x230 [ 2373.972433][ T29] ? preempt_count_add+0x91/0x1a0 [ 2373.977453][ T29] ? show_regs_print_info+0x20/0x20 [ 2373.982731][ T29] ? load_image+0x3b0/0x3b0 [ 2373.987230][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 2373.992230][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2373.998399][ T29] ? _printk+0xd0/0x110 [ 2374.002564][ T29] ? load_image+0x3b0/0x3b0 [ 2374.007110][ T29] ? load_image+0x3b0/0x3b0 [ 2374.011623][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2374.017692][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2374.023702][ T29] watchdog+0xf41/0xf80 [ 2374.027863][ T29] ? watchdog+0x1e1/0xf80 [ 2374.032189][ T29] kthread+0x2fa/0x390 [ 2374.036246][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2374.041339][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2374.045985][ T29] ret_from_fork+0x48/0x80 [ 2374.050409][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2374.055187][ T29] ret_from_fork_asm+0x11/0x20 [ 2374.059974][ T29] [ 2374.064706][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2374.069984][ C1] NMI backtrace for cpu 1 [ 2374.069996][ C1] CPU: 1 PID: 5977 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 2374.070011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2374.070020][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 2374.070042][ C1] RIP: 0010:stack_trace_consume_entry+0x129/0x270 [ 2374.070064][ C1] Code: 89 c5 e8 ca 7d 68 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 2f 01 00 00 41 3b 1e 0f 92 c0 <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 44 89 c1 80 e1 07 80 [ 2374.070077][ C1] RSP: 0018:ffffc90004ec72b8 EFLAGS: 00000287 [ 2374.070089][ C1] RAX: 0000000000000001 RBX: 000000000000000f RCX: ffff8880764b1e00 [ 2374.070099][ C1] RDX: dffffc0000000000 RSI: ffffffff81308be8 RDI: ffffc90004ec73c0 [ 2374.070109][ C1] RBP: 1ffff920009d8e7a R08: ffffc90004ec73d0 R09: 000000000000000e [ 2374.070120][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 2374.070128][ C1] R13: 1ffff920009d8e79 R14: ffffc90004ec73c8 R15: ffffc90004ec74f0 [ 2374.070140][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2374.070152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2374.070162][ C1] CR2: 00007f02a93b6358 CR3: 0000000076133000 CR4: 00000000003506e0 [ 2374.070176][ C1] Call Trace: [ 2374.070182][ C1] [ 2374.070190][ C1] ? __kernel_text_address+0xd/0x30 [ 2374.070210][ C1] ? ret_from_fork+0x48/0x80 [ 2374.070227][ C1] ? stack_trace_save+0xe0/0xe0 [ 2374.070243][ C1] arch_stack_walk+0x138/0x190 [ 2374.070260][ C1] ? ret_from_fork+0x48/0x80 [ 2374.070279][ C1] stack_trace_save+0x9c/0xe0 [ 2374.070295][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2374.070311][ C1] ? mark_lock+0x94/0x320 [ 2374.070331][ C1] save_stack+0xf7/0x1f0 [ 2374.070360][ C1] ? __reset_page_owner+0x190/0x190 [ 2374.070380][ C1] ? seqcount_lockdep_reader_access+0x103/0x180 [ 2374.070394][ C1] ? post_alloc_hook+0x1cd/0x210 [ 2374.070414][ C1] ? get_page_from_freelist+0x195c/0x19f0 [ 2374.070434][ C1] ? __alloc_pages+0x1e3/0x460 [ 2374.070454][ C1] ? alloc_slab_page+0x5d/0x170 [ 2374.070475][ C1] ? new_slab+0x87/0x2e0 [ 2374.070493][ C1] ? ___slab_alloc+0xc6d/0x1300 [ 2374.070512][ C1] ? __kmem_cache_alloc_node+0x1a2/0x260 [ 2374.070531][ C1] ? __kmalloc_node_track_caller+0xa2/0x230 [ 2374.070551][ C1] ? kmalloc_reserve+0x117/0x260 [ 2374.070660][ C1] ? __alloc_skb+0x138/0x2c0 [ 2374.070678][ C1] ? nsim_dev_trap_report_work+0x293/0xb00 [ 2374.070694][ C1] ? process_scheduled_works+0xa45/0x15b0 [ 2374.070710][ C1] ? worker_thread+0xa55/0xfc0 [ 2374.070726][ C1] ? kthread+0x2fa/0x390 [ 2374.070738][ C1] ? ret_from_fork+0x48/0x80 [ 2374.070755][ C1] ? get_page_from_freelist+0x6a8/0x19f0 [ 2374.070777][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 2374.070795][ C1] __set_page_owner+0x1d/0x60 [ 2374.070817][ C1] post_alloc_hook+0x1cd/0x210 [ 2374.070838][ C1] get_page_from_freelist+0x195c/0x19f0 [ 2374.070870][ C1] ? __next_zones_zonelist+0x9d/0x130 [ 2374.070891][ C1] ? prepare_alloc_pages+0x366/0x5f0 [ 2374.070939][ C1] __alloc_pages+0x1e3/0x460 [ 2374.070961][ C1] ? zone_statistics+0x170/0x170 [ 2374.070986][ C1] ? alloc_pages+0x4dc/0x740 [ 2374.071007][ C1] ? lock_chain_count+0x20/0x20 [ 2374.071023][ C1] alloc_slab_page+0x5d/0x170 [ 2374.071045][ C1] new_slab+0x87/0x2e0 [ 2374.071067][ C1] ___slab_alloc+0xc6d/0x1300 [ 2374.071089][ C1] ? __alloc_skb+0x138/0x2c0 [ 2374.071112][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 2374.071131][ C1] ? __alloc_skb+0x138/0x2c0 [ 2374.071152][ C1] ? __alloc_skb+0x138/0x2c0 [ 2374.071171][ C1] __kmalloc_node_track_caller+0xa2/0x230 [ 2374.071194][ C1] ? rcu_is_watching+0x15/0xb0 [ 2374.071213][ C1] ? __alloc_skb+0x138/0x2c0 [ 2374.071232][ C1] kmalloc_reserve+0x117/0x260 [ 2374.071254][ C1] __alloc_skb+0x138/0x2c0 [ 2374.071275][ C1] nsim_dev_trap_report_work+0x293/0xb00 [ 2374.071301][ C1] ? process_scheduled_works+0x957/0x15b0 [ 2374.071318][ C1] process_scheduled_works+0xa45/0x15b0 [ 2374.071352][ C1] ? assign_work+0x400/0x400 [ 2374.071372][ C1] ? assign_work+0x39e/0x400 [ 2374.071391][ C1] worker_thread+0xa55/0xfc0 [ 2374.071408][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2374.071424][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2374.071438][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2374.071463][ C1] kthread+0x2fa/0x390 [ 2374.071475][ C1] ? pr_cont_work+0x560/0x560 [ 2374.071492][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2374.071505][ C1] ret_from_fork+0x48/0x80 [ 2374.071521][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2374.071534][ C1] ret_from_fork_asm+0x11/0x20 [ 2374.071561][ C1] [ 2374.522197][ C1] vkms_vblank_simulate: vblank timer overrun [ 2374.536648][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2374.543533][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2374.550721][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2374.560861][ T29] Call Trace: [ 2374.564135][ T29] [ 2374.567058][ T29] dump_stack_lvl+0x16c/0x230 [ 2374.571734][ T29] ? show_regs_print_info+0x20/0x20 [ 2374.576925][ T29] ? load_image+0x3b0/0x3b0 [ 2374.581428][ T29] panic+0x2c0/0x710 [ 2374.585312][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2374.590947][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2374.595438][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2374.600975][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2374.607126][ T29] watchdog+0xf80/0xf80 [ 2374.611275][ T29] ? watchdog+0x1e1/0xf80 [ 2374.615604][ T29] kthread+0x2fa/0x390 [ 2374.619660][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2374.624682][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2374.629271][ T29] ret_from_fork+0x48/0x80 [ 2374.633681][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2374.638262][ T29] ret_from_fork_asm+0x11/0x20 [ 2374.643051][ T29] [ 2374.646317][ T29] Kernel Offset: disabled [ 2374.650634][ T29] Rebooting in 86400 seconds..