last executing test programs: 29m5.864092078s ago: executing program 32 (id=256): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 25m48.947604001s ago: executing program 33 (id=871): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400, 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x2, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xf, &(0x7f00000002c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180000002c00010000000000000000000400"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000300)=0x13, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x891a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xa}, &(0x7f00000000c0)=0x8) 25m23.431427559s ago: executing program 34 (id=912): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r3) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xb, 0xfc, "0000fcff3100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780)="5dd8ce66179659c7557eb1a55821d7101e092ad99e2773dae9d252883aaa60d8d338bb84d21e68a2ee8bd3cbdc8248953464b69bb8fb0bfa06a44fa22330e43707eb772e6892c9acb90ec54d86b0579d5c6c3b493254094474cd0b37b2481022d6c1cf79586d57dd694bb8dc835cfdee063a884470790c6d337296a53494aaeab1e58d11c1c2ff5b0a1897ecb0e76eef5f45441ef224158d2ee60888dca7134c896a746ba928ce64b9d92d864d9434db471e490ba8aa33ef05d7f14562b4aa13f293bb21629fa4b92fd439c61a95220f69b515070000f3ffffff000f1ba0768064dcbf449940a5d5fbfe21544397c43718329ed2ac4300"/256, 0x100) epoll_create(0x207ffd) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX=r5, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000003c0)={{0x3, @name="16aefc1a4f59f60a83ee169545c188ee6dc48949ce17cbcfe34abf00"}, "f25676ce64c81a76b03f46e795087d530debfa35978c449c688d7f4634ade635", 0x3}) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'ovf\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xfffffffffffffd56) r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 24m14.964161232s ago: executing program 36 (id=973): close(0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='v', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23m31.051168598s ago: executing program 37 (id=988): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) recvmsg(r0, 0x0, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0x1000}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r4, 0x1080}], 0x1, 0x7f) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x216c00, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) fcntl$getownex(r2, 0x10, &(0x7f00000016c0)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000001680)='net/ip_mr_cache\x00') getdents(r7, &(0x7f00000001c0)=""/35, 0x23) dup2(r2, r5) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r8, &(0x7f0000001540)=[{&(0x7f0000000280)="a3107cc3", 0x4}, {0x0}], 0x2) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x0) vmsplice(r9, 0x0, 0x2d, 0x2) 21m21.146191231s ago: executing program 38 (id=1015): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/148, 0x94}], 0x1, 0xd0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r3) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000300)) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x0, 0x6, 0x0, 0xb, 0xfc, "0000fcff3100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000780)="5dd8ce66179659c7557eb1a55821d7101e092ad99e2773dae9d252883aaa60d8d338bb84d21e68a2ee8bd3cbdc8248953464b69bb8fb0bfa06a44fa22330e43707eb772e6892c9acb90ec54d86b0579d5c6c3b493254094474cd0b37b2481022d6c1cf79586d57dd694bb8dc835cfdee063a884470790c6d337296a53494aaeab1e58d11c1c2ff5b0a1897ecb0e76eef5f45441ef224158d2ee60888dca7134c896a746ba928ce64b9d92d864d9434db471e490ba8aa33ef05d7f14562b4aa13f293bb21629fa4b92fd439c61a95220f69b515070000f3ffffff000f1ba0768064dcbf449940a5d5fbfe21544397c43718329ed2ac4300"/256, 0x100) epoll_create(0x207ffd) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008051) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000003c0)={{0x3, @name="16aefc1a4f59f60a83ee169545c188ee6dc48949ce17cbcfe34abf00"}, "f25676ce64c81a76b03f46e795087d530debfa35978c449c688d7f4634ade635", 0x3}) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f00000006c0)='./file1\x00', 0x2000, 0x0) mount(&(0x7f0000002a40)=@nullb, &(0x7f0000002a80)='./file1\x00', &(0x7f0000002ac0)='squashfs\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x1c) splice(0xffffffffffffffff, &(0x7f0000000180), r5, 0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x4, &(0x7f0000000280)=[{0xb5, 0x71, 0x4}, {0x9, 0x6, 0x80, 0xffffffff}, {0x6, 0x40, 0x0, 0x8}, {0x4, 0xa, 0x4, 0xff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x20000000000001fa, &(0x7f00000005c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x164, &(0x7f0000000240)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e01000008240679e6549f558789f1a16d927c472d346a3e294d"], 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x6, "908da425ae9e0b8f0e4fc1be21ada4ffb6a5c1e7b604cf87533415605aa2c087", 0x5, 0x37bf, 0xe, 0x7, 0x6, 0x1f4, 0xd54, 0x5, [0x9, 0xc, 0x4, 0x8]}) syz_clone(0x24040000, &(0x7f0000000300)="3b24819f06a89f9a13501fce357157afddc4c3c8a2a86f7e680364b7845114706fe8c074c93e3a837b88d6a6de9e6dd0a8477120769a8ecdbda5f318bbb914efeb97c727c0180444d213eccb", 0x4c, &(0x7f0000000040), &(0x7f0000000380), &(0x7f0000000440)="15843a05ecefce794646302e29454a98149bea03bda424ace55ad1e4166b87c6359bb584b1b37bbf7c50595248f24e88a8df5ed3dd54a6e33b369ef675bc268a68037e111565c55df7aa30341cb05647573c947b2d4290534356e9f1934aa253566db5714fff67941229f6bdfad35d48945f445794e8ed07996ba930ceb8799a85835a2846addd19b950832b69da82b31a3a2f32afe4db54e70f766f62cc45afc6d723461ea359f0") 21m4.648521165s ago: executing program 40 (id=1046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) map_shadow_stack(&(0x7f0000030000/0x3000)=nil, 0x3000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 20m4.12852455s ago: executing program 41 (id=1103): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x26b) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 18m53.755704925s ago: executing program 42 (id=1220): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0xfffc, 0x4e24, 0x0, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1}, {0x1, 0xfffffffffffffffe, 0x0, 0x9}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x200000, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 18m47.833144995s ago: executing program 43 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_open_dev$dri(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000df000003000000280001800d0001007564703a73797a3215"], 0x3c}}, 0x0) 17m57.17020701s ago: executing program 44 (id=1321): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x61ed06102a080c2d) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) r9 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) 17m54.063878432s ago: executing program 45 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffe}, 0x40000, 0x0, 0x1, 0x0, 0x157bcd09ffef56c2}, {{@in6=@private2, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102400, 0x19000) 17m49.417864735s ago: executing program 46 (id=1331): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x101) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc959, 0xf, 0x9, 0x80, 0x2, 0x3, 0x81, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x800, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x100008, 0x0, 0x80, 0x0, 0x5, 0x6, 0x7, 0x4, 0x1, 0x40], [0x10000007, 0xfffc, 0x8000012f, 0x8000, 0x6, 0xfffffff3, 0x129432e6, 0x1cb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x6, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x35, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x200009, 0x4, 0x9, 0xb, 0x2a, 0x6, 0x80000001, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xffff7ffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x2, 0x100005, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0xffffffff, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7fe, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x85c], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x105, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffbfffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x8, 0x7f, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x9, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0x1, 0x200, 0xfdff3441, 0xfff]}, 0x45c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/20], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r4, &(0x7f0000001a40), 0x0}, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17m19.197211769s ago: executing program 47 (id=1362): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r5, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r8, @ANYRES16=r8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 16m26.060400927s ago: executing program 48 (id=1385): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="2300000000f4ffffff000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="2c005e8008000700bb0300000800050003000000080003003e3ed7c7080003000400000008000900030000000c005e8008000900ff070000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x100000000002, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000900)={0x2, @pix={0x7, 0x8, 0x34324258, 0x4, 0x5, 0x7, 0xc, 0xfeedcafe, 0x1, 0x0, 0x2, 0x4}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60000000004d8800"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026e00010100200009040000ff020200000524060000052400ffff0d240f01010100000000fcff001524120f00a317a88b045e4f01a607c0ffcb7e392a1524129d55a317a88b045e4f01a607c0ffcb7e392a090581122000000000090582022000000000090503"], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x100, 0x6, [{{0x9, 0x4, 0x0, 0xe4, 0x2, 0x7, 0x1, 0x3, 0xd3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x4, 0xa}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x140, 0x6, 0x9, 0x0, 0x20, 0xcb}, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="050f3f000414100409cfd1e88facdb9e0b5d9a3a6959484cab0710021053050014100a00c200000000f00000f000ff00300000000b10010a5100f9038f70fd"], 0x6, [{0x37, &(0x7f0000000140)=@string={0x37, 0x3, "5e715d730fcaa48ea7facb9ede768a94f9dcef31a49a183dfa274e9fcecbd77d4cb94e2e489b7576698a78fa8d8c7f98a66fa68a97"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81a}}, {0xe1, &(0x7f0000000280)=@string={0xe1, 0x3, "887302e38ee87c0c6837d4d0c9d3b55d0d7722226a705484a88103e20b6ef1f3f038cfad6011c5566342fb9d26f12592d81863811a0d0750109018c741da0571f6136ed296341873bc16f13f5704111753f19885649ba3958b97ed7c4560d7bedaa7a4a776134a702968e3188ff4d1da65f92fcb8af3c963e27e649b7bf0650f39ffaea506d86959683366df3700561812e27793cd9633e7fe6ad22fc98f106e01c98ddbe76682f22fb5c13365ae066ae9b2fb7e528b531ee5999a7d9f6434e6642a0f9cc28e0d8c3e95da8ad61584b6098ad314fecaa2397240ffb3d5173c"}}]}) 16m10.274783858s ago: executing program 49 (id=1398): r0 = syz_open_procfs$namespace(0x0, 0x0) setns(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x27a) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) pipe(&(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 15m55.183144374s ago: executing program 50 (id=1408): syz_open_dev$usbfs(0x0, 0x77, 0x101301) gettid() r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0xd0fc, 0x800, 0x3, 0x3e4}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0xfffffffc) syz_emit_vhci(0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910480000", @ANYRESHEX=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000010000)=ANY=[@ANYBLOB="1c0000005e0001", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40200c0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 15m52.631328119s ago: executing program 51 (id=1413): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x1, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, @loopback, @dev}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002980)=@generic={0x0, 0x0, 0x8}, 0x18) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x8) read$fb(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 14m40.881643965s ago: executing program 52 (id=1494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x8003, 0x1000}, 0xa) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) dup3(r1, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x550, 0x4000004) 14m11.149786625s ago: executing program 9 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x1}]}, 0x24}}, 0x0) 14m10.843381169s ago: executing program 53 (id=1558): r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x1e83, 0x2, 0x2, 0xf2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) getrlimit(0xa, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x14, r5, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000f5c8ab6cb810000304008bbbed434b5404c2c49970", @ANYRES32=0x0, @ANYBLOB="00080000075005002c0012800b00010062726964676500001c00028008001c00fdffffff05002400010000000500170001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getrlimit(0xa, &(0x7f0000000380)) 13m55.590240028s ago: executing program 54 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x1}]}, 0x24}}, 0x0) 13m30.338511462s ago: executing program 55 (id=1618): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$int_in(r0, 0x5452, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) getpid() io_setup(0x3, &(0x7f00000003c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc000) recvmmsg(r3, &(0x7f0000000b40)=[{{&(0x7f0000000d00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000940)=""/243, 0xf3}, 0x6}, {{&(0x7f0000000a40)=@x25, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/61, 0x3d}], 0x1, &(0x7f0000000b00)=""/12, 0xc}, 0x1}], 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="90000000000801a69467020000080000000000010000080900060073797a30eeffffff0900010073797a31000000040900010073797a300000000006000240e8400000060002408808000005000300110000000900010073797a31d900000006000240000000002400048008000640"], 0x90}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x4, &(0x7f0000000cc0), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) write$binfmt_script(r5, 0x0, 0xfffffe5d) getsockname$packet(r5, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004ac0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r6, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) 13m17.771379662s ago: executing program 56 (id=1630): socket(0x40000000015, 0x805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, &(0x7f0000000280)=0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0/../file0\x00', r1, 0x0, 0x1}) getpid() listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000019440)=""/4096, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13m10.347347262s ago: executing program 57 (id=1635): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast1}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}}, 0x4000000) shutdown(0xffffffffffffffff, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13m5.583992089s ago: executing program 58 (id=1589): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2f) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfffffffc, @dev, 0x8}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900), 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r7 = socket(0x2, 0x4, 0x2011) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r6}, 0xc) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r8, 0x540b, 0x2000000000000001) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x3, 0x3f8, 0x0, 0x32}, 0x9c) 12m33.569577233s ago: executing program 59 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xaa6c3) read(r4, &(0x7f0000000140)=""/179, 0xb3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m41.818423589s ago: executing program 9 (id=1647): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, 0x0, 0x0) 11m40.94337441s ago: executing program 9 (id=1688): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000340)={0x2, 0x100, 0xfffffffc}) 11m39.898323369s ago: executing program 60 (id=1679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20000000000001bc, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'ovf\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xfffffffffffffd56) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x4, 0x0, 0x0) 11m39.851756548s ago: executing program 9 (id=1690): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 11m38.352500004s ago: executing program 9 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ee00000000", @ANYRES32, @ANYBLOB="3900000000000000b702000014000300b703000000000000850000008300000010c200000000000055090100000000009500000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 11m37.017036492s ago: executing program 9 (id=1693): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1fc) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec85"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002740)={'wlan1\x00', &(0x7f0000002700)=@ethtool_ts_info}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 11m21.599977664s ago: executing program 61 (id=1693): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1fc) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec85"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002740)={'wlan1\x00', &(0x7f0000002700)=@ethtool_ts_info}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 10m33.707856538s ago: executing program 5 (id=1779): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 10m33.060347297s ago: executing program 5 (id=1781): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000200)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 10m32.394433967s ago: executing program 5 (id=1784): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10m31.766882085s ago: executing program 5 (id=1787): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc1a, 0xfffffffb, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) 10m31.05069328s ago: executing program 5 (id=1788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1b1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0xff, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m27.903362449s ago: executing program 5 (id=1794): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019bc0)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000700)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da8773525688000a5f6a49c37b23832cc040c84e783080c453e1088ece5", 0x4f}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x246000, 0x0) r4 = dup2(r3, r2) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000004c0)=@data_frame={@msdu=@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa}, @device_b, @device_b, @initial, {0x2, 0x1}, "", @value={0xe, 0x1, 0x2, 0x0, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}, 0x1e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="03cb09000000000000bbbbbb0800450000380000000000019078ac1e0001ac1414aa03"], 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40003100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4, 0x0, 0x7ff}, 0x18) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x50400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m25.685290323s ago: executing program 3 (id=1803): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788", 0xc, 0x4, &(0x7f0000000140)={0x11, 0x6558, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x237, 0x0, &(0x7f0000000300), 0x0) getdents(r0, &(0x7f0000000100)=""/171, 0xab) 10m20.208027829s ago: executing program 3 (id=1809): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000c80)='fdinfo/3\x00') 10m18.986142559s ago: executing program 3 (id=1811): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f0000000080), 0x0, 0xa3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x3e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8c) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010713bd70000000000005000000d61b862dadf3c115686f54bf57d6496267ca07f92d46bf166b9bcd8c9be0416f086cc284ac5f8a7f31c6167e2e5c5f05d3030027b41a5955154be0e92e176143f633d572d00dee5737bc"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r5, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 10m18.231877898s ago: executing program 3 (id=1813): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x6, 0x0, 0x7, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 10m17.243522636s ago: executing program 3 (id=1814): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0), 0x80) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20044080) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r6, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 10m12.809121988s ago: executing program 1 (id=1818): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x32f, @time={0x0, 0x9}, 0x0, {0x4}, 0x1, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0x80045300, 0x0) tkill(r0, 0x7) 10m12.53611857s ago: executing program 62 (id=1794): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019bc0)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000700)="41c2b1af4b9e2afb08fbfa8795ae198eb98603501824b278e7af60824251a6b1334031aac5f7421d7ea02310f3f6dad9592da8773525688000a5f6a49c37b23832cc040c84e783080c453e1088ece5", 0x4f}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x246000, 0x0) r4 = dup2(r3, r2) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000004c0)=@data_frame={@msdu=@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa}, @device_b, @device_b, @initial, {0x2, 0x1}, "", @value={0xe, 0x1, 0x2, 0x0, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}, 0x1e) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="03cb09000000000000bbbbbb0800450000380000000000019078ac1e0001ac1414aa03"], 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40003100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4, 0x0, 0x7ff}, 0x18) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x50400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m12.102601409s ago: executing program 1 (id=1820): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1bfd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9daebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0x9c}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff160f374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4", 0x6d}, {0x0}, {&(0x7f0000000180)="df2966f83be61be11a9831c2e62c48d200e5ef6d8633d6649f81483c", 0x1c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896", 0x80}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 10m11.711505069s ago: executing program 3 (id=1821): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB=',g']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102368, 0x18fe0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 10m10.571563627s ago: executing program 1 (id=1823): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f0000000080), 0x0, 0xa3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x3e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8c) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010713bd70000000000005000000d61b862dadf3c115686f54bf57d6496267ca07f92d46bf166b9bcd8c9be0416f086cc284ac5f8a7f31c6167e2e5c5f05d3030027b41a5955154be0e92e176143f633d572d00dee5737bc"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r5, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 10m9.311487939s ago: executing program 1 (id=1825): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x6cbc961872fd6670}}, 0x48) 10m7.525879285s ago: executing program 1 (id=1828): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f00000007c0)=""/156, 0x1, 0x9c}, &(0x7f0000000240)={&(0x7f0000000100)=""/1, 0x0, 0x1}) write$tcp_mem(r3, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 10m3.602874686s ago: executing program 1 (id=1831): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x8b, 0x100000500) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r2) sendmmsg$inet(r4, &(0x7f0000000480), 0x0, 0x4084) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100040000000000000039000000", @ANYRES32, @ANYBLOB="18005a80"], 0x34}}, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 9m52.24262594s ago: executing program 63 (id=1821): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x34) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB=',g']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102368, 0x18fe0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 9m48.209275056s ago: executing program 64 (id=1831): openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f00000000c0)=0x8b, 0x100000500) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r2) sendmmsg$inet(r4, &(0x7f0000000480), 0x0, 0x4084) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100040000000000000039000000", @ANYRES32, @ANYBLOB="18005a80"], 0x34}}, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/206, 0xce}, {&(0x7f00000005c0)=""/189, 0xbd}], 0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 9m23.967974648s ago: executing program 6 (id=1877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x35, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 9m22.200944988s ago: executing program 6 (id=1879): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fcntl$dupfd(r0, 0x406, r2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x2) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d400dc6626c892b6bc436a00", 0x10) r7 = openat$cgroup(r3, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000200)={0x4, @win={{0x8, 0x7, 0x6, 0x1}, 0x1, 0x5, 0x0, 0xffffffff, 0x0, 0xab}}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x1}, {0x0, 0x7}}}, 0x24}}, 0x4000) 9m20.059583398s ago: executing program 6 (id=1881): r0 = syz_open_dev$dri(0x0, 0x1, 0x28000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffd}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x101, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000]}, 0x45c) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f00000000c0)={@loopback, @initdev, @dev}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x8000000, 0x4, 0xfbc}) 9m15.131536473s ago: executing program 6 (id=1886): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, {0xa, 0x0, 0x4, @rand_addr=' \x01\x00'}, r0}}, 0x48) 9m14.351343122s ago: executing program 6 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20080}, 0x4040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000001808a0cd544ee770000000000181100002696c9f5725896da0ec5c2b37902b3be6d502214e089a8cbba27da2d8a5d705d694955e442de95065cfe287969f932694522720c6059cdf1137a6077ef308e79ef010ceb686f8fe5e825aeb44b675815ebc71e6f969c98054cb2366fd63788b5547d2e72aef06b4f40e8c8cd996635c40df083bc22dfb9b86cd1c2a22ceb6312ad49d03f2188752630eaed83f64a213874ec0a85ed6200", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0x40bc5311, &(0x7f0000000440)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) close(0x3) r6 = epoll_create1(0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000004c0)) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000300)=0x68) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0xc5, 0xa7, 0x20, 0x1a0a, 0x101, 0xeedf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x88, 0x0, 0x0, 0x4e, 0x9e, 0x5e}}]}}]}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r9, 0x7, 0x8000, 0x6, 0xfffff800, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x3a, 0x0, 0x5, [0x8819, 0x4, 0x2]}, @ssrr={0x89, 0x7, 0x30, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xfb, 0x0, 0x4, [0x1, 0x7, 0x3]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0xc, "2eeb75444dc1dd38a2ad"}, {0x3, 0x9, "097d463b4615a9"}, {0x0, 0x12, "71f55aa1db88d480dafe566ee8a72995"}, {0x0, 0xb, "016854b42112b027e5"}]}, @rr={0x7, 0xb, 0x14, [@local, @multicast2]}, @timestamp={0x44, 0x10, 0xae, 0x0, 0x1, [0x401, 0x4e3d, 0x0]}, @end]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9m10.185642505s ago: executing program 6 (id=1891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) lseek(r4, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0xff, 0x0, 0x0, 0x2004c8, 0x479, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x200000000003]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x20, 0x1a, 0x54, &(0x7f0000000800)="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xe0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x7) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0x9, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffff9}) 8m54.720206921s ago: executing program 65 (id=1891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) lseek(r4, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0xff, 0x0, 0x0, 0x2004c8, 0x479, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x200000000003]}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x20, 0x1a, 0x54, &(0x7f0000000800)="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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xe0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x7) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0x9, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffff9}) 12.768154053s ago: executing program 4 (id=3693): r0 = gettid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.331305098s ago: executing program 2 (id=3696): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB], 0x174}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x10) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c000101", 0x16) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 11.275285647s ago: executing program 4 (id=3698): syz_mount_image$udf(&(0x7f0000000240), &(0x7f0000000340)='./control\x00', 0x10016, &(0x7f0000000040)={[{@rootdir={'rootdir', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@noadinicb}, {@uid}, {@undelete}, {@shortad}, {@uid_forget}, {@shortad}, {@uid_forget}]}, 0x1, 0xc4a, &(0x7f00000027c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) 10.588427037s ago: executing program 4 (id=3701): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x1a, 0x800, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x24) 10.451410396s ago: executing program 0 (id=3703): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 9.769193989s ago: executing program 7 (id=3704): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x16b601, 0x0) write$sequencer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) 9.205297515s ago: executing program 2 (id=3705): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.304985478s ago: executing program 7 (id=3706): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0x8, "cca1c1d6"}, @main=@item_4={0x3, 0x0, 0x9, "7e49ed50"}, @global=@item_012={0x1, 0x1, 0x4, "b8"}, @local=@item_012={0x1, 0x2, 0x4, 'u'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x1, 0x200, 0x1, 0x9, 0x40, 0x3ff, 0x3ff, 0x2, 0x10, 0x619, 0x8, 0x800, 0x4, 0x8}) 8.191784953s ago: executing program 8 (id=3707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20080}, 0x4040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000001808a0cd544ee770000000000181100002696c9f5725896da0ec5c2b37902b3be6d502214e089a8cbba27da2d8a5d705d694955e442de95065cfe287969f932694522720c6059cdf1137a6077ef308e79ef010ceb686f8fe5e825aeb44b675815ebc71e6f969c98054cb2366fd63788b5547d2e72aef06b4f40e8c8cd996635c40df083bc22dfb9b86cd1c2a22ceb6312ad49d03f2188752630eaed83f64a213874ec0a85ed6200", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x40bc5311, &(0x7f0000000440)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) close(0x3) r7 = epoll_create1(0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) close(r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000300)=0x68) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0xc5, 0xa7, 0x20, 0x1a0a, 0x101, 0xeedf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x88, 0x0, 0x0, 0x4e, 0x9e, 0x5e}}]}}]}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r10, 0x7, 0x8000, 0x6, 0xfffff800, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x3a, 0x0, 0x5, [0x8819, 0x4, 0x2]}, @ssrr={0x89, 0x7, 0x30, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xfb, 0x0, 0x4, [0x1, 0x7, 0x3]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0xc, "2eeb75444dc1dd38a2ad"}, {0x3, 0x9, "097d463b4615a9"}, {0x0, 0x12, "71f55aa1db88d480dafe566ee8a72995"}, {0x0, 0xb, "016854b42112b027e5"}]}, @rr={0x7, 0xb, 0x14, [@local, @multicast2]}, @timestamp={0x44, 0x10, 0xae, 0x0, 0x1, [0x401, 0x4e3d, 0x0]}, @end]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.177311761s ago: executing program 2 (id=3708): r0 = gettid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.452762774s ago: executing program 4 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x3f, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x60, 0xc8, 0x65, 0x40, 0xf3d, 0x68aa, 0xc63, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x7, 0x2, 0x3, 0xce, 0xaa, 0x8e, 0xf, [], [{{0x9, 0x5, 0xf, 0x2, 0x40, 0xca, 0x5, 0xf4}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x3e, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x3, 0x5b, 0x7}}]}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000a05000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x0) 6.155519044s ago: executing program 7 (id=3710): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.853743673s ago: executing program 7 (id=3711): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028005000100060000", @ANYRES32], 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.67649565s ago: executing program 2 (id=3712): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 5.627542135s ago: executing program 8 (id=3713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f00000007c0)=""/156, 0x1, 0x9c}, &(0x7f0000000240)={&(0x7f0000000100)=""/1, 0x0, 0x1}) write$tcp_mem(r3, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 5.569582112s ago: executing program 0 (id=3714): symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.162474693s ago: executing program 0 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f0000001780)=""/181, 0xb5}, 0x4}], 0x1, 0x6002, 0x0) sendmmsg$unix(r2, &(0x7f0000000680), 0x4924924924925c6, 0x0) 4.956897258s ago: executing program 7 (id=3716): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, &(0x7f00000013c0)=ANY=[@ANYBLOB='@\":'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf6, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d") 4.501910924s ago: executing program 4 (id=3717): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) 3.795231695s ago: executing program 0 (id=3718): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x3, r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.551844191s ago: executing program 8 (id=3719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)={0x2c, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 3.334567982s ago: executing program 0 (id=3720): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x4, 0x0, 0x0, {[@mptcp=@generic={0x0, 0x2}]}}}}}}}}, 0x0) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2046) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0xdd4, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x38800000, {0x5, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, r3, 0x40000002, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.992806698s ago: executing program 8 (id=3721): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f00000003c0)={[{@nls={'nls', 0x3d, 'cp865'}}, {@gid}, {@nobarrier}, {@nodecompose}, {}, {@part}, {@gid}, {@nobarrier}, {@nodecompose}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 2.671754035s ago: executing program 8 (id=3722): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x2}]}, 0x20}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.413236183s ago: executing program 7 (id=3723): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000005e80)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES16], 0xff, 0x5a82, &(0x7f00000003c0)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x6) 2.365504881s ago: executing program 8 (id=3724): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.118635162s ago: executing program 0 (id=3725): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x0, 0xa, 0x4, "d5902ff3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40, 0x4, 0xbb, {0xbb, 0x24, "acef85c8f09c02d2616c89ad0ed28062679f94428113da77790595d1eed3d53379e22217ef06cb3efcdecb30e2f9a31426f3d0e7903cd40a03dc9df011245040427669b8e2cd67f56c9ed9bb119d2477511319008f80888a815a48bca6db112615b2934c57ffec3338002707d894aaf248c442bfe26e2083d749d1abd820b798d5f786c927e61d499cd66fe66999e4bcdec25caf1d26ac0f479e39d067522a8ea6f3d917222e7cc4e783662923abb434c77e50e30e29063a01"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00032f0000002f0326835dbca211653df0fa297bb38167999db016a8bd268aaa36888346a5b67fb19420de0b26e706"], 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0xa, 0x5f, "3d203ed0", "a8e055bd"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xb, 0x8, 0x8, 0x8, 0x6}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x40, 0x3}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xe0, 0x1, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "bc10"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, 0x0, &(0x7f0000000900)={0x40, 0x19, 0x2, "ac49"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x40}}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x10}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', 0x0, r4, 0x3, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x5, {0x1, 0x8, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, 0x0, 0x6000, '\x00', 0x1, 0x8, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0x9, 0x7}, {0x40000008, 0x943}, 0x8000, 0x2c0dbbd7, 0x0, 0x61}}}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 1.986208699s ago: executing program 2 (id=3726): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB], 0x174}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x10) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c000101", 0x16) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 964.24228ms ago: executing program 4 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20080}, 0x4040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000001808a0cd544ee770000000000181100002696c9f5725896da0ec5c2b37902b3be6d502214e089a8cbba27da2d8a5d705d694955e442de95065cfe287969f932694522720c6059cdf1137a6077ef308e79ef010ceb686f8fe5e825aeb44b675815ebc71e6f969c98054cb2366fd63788b5547d2e72aef06b4f40e8c8cd996635c40df083bc22dfb9b86cd1c2a22ceb6312ad49d03f2188752630eaed83f64a213874ec0a85ed6200", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0x40bc5311, &(0x7f0000000440)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) close(0x3) r7 = epoll_create1(0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) close(r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000300)=0x68) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8d, 0xc5, 0xa7, 0x20, 0x1a0a, 0x101, 0xeedf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x88, 0x0, 0x0, 0x4e, 0x9e, 0x5e}}]}}]}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', r10, 0x7, 0x8000, 0x6, 0xfffff800, {{0x25, 0x4, 0x3, 0x7, 0x94, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x3a, 0x0, 0x5, [0x8819, 0x4, 0x2]}, @ssrr={0x89, 0x7, 0x30, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xfb, 0x0, 0x4, [0x1, 0x7, 0x3]}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x7, 0xc, "2eeb75444dc1dd38a2ad"}, {0x3, 0x9, "097d463b4615a9"}, {0x0, 0x12, "71f55aa1db88d480dafe566ee8a72995"}, {0x0, 0xb, "016854b42112b027e5"}]}, @rr={0x7, 0xb, 0x14, [@local, @multicast2]}, @timestamp={0x44, 0x10, 0xae, 0x0, 0x1, [0x401, 0x4e3d, 0x0]}, @end]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 2 (id=3728): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) kernel console output (not intermixed with test programs): -71 req 04 val 1200 [ 1969.094875][ T10] pwc: Registered as video103. [ 1969.102297][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input73 [ 1969.186990][ T10] usb 9-1: USB disconnect, device number 66 [ 1969.312899][T19130] loop9: detected capacity change from 0 to 8 [ 1969.332119][T19130] Dev loop9: unable to read RDB block 8 [ 1969.338756][T19130] loop9: unable to read partition table [ 1969.353047][T19130] loop9: partition table beyond EOD, truncated [ 1969.359877][T19130] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1970.129663][T19140] netlink: 'syz.2.3345': attribute type 10 has an invalid length. [ 1971.222605][ T10] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1971.442137][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1971.452843][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1971.466583][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1971.476105][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.559626][T19147] loop2: detected capacity change from 0 to 4096 [ 1971.609244][T19147] NILFS (loop2): mounting unchecked fs [ 1971.610069][ T10] usb 9-1: config 0 descriptor?? [ 1971.615112][T19147] NILFS (loop2): recovery required for readonly filesystem [ 1971.630662][T19147] NILFS (loop2): write access will be enabled during recovery [ 1971.679014][ T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1971.705415][T19150] usb usb8: usbfs: process 19150 (syz.4.3349) did not claim interface 0 before use [ 1971.744288][T19147] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1971.752916][T19147] NILFS (loop2): trying rollback from an earlier position [ 1971.804867][T19147] NILFS (loop2): recovery complete [ 1971.823815][ T29] audit: type=1326 audit(1741286721.725:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.4.3349" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 1971.889143][T19147] NILFS (loop2): The specified checkpoint is not a snapshot (checkpoint number=1) [ 1972.070871][T12247] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1972.256959][T12247] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.268955][T12247] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1972.294906][T12247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.800178][T12247] usb 8-1: config 0 descriptor?? [ 1973.350379][T12247] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 1973.443538][T12247] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0026/input/input74 [ 1973.727210][T12247] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 1973.787945][T12247] usb 8-1: USB disconnect, device number 46 [ 1973.892556][T19161] loop0: detected capacity change from 0 to 2048 [ 1973.928778][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1973.976284][T19163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1974.026035][T19161] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 1974.057286][T19161] Remounting filesystem read-only [ 1974.086922][T12247] usb 9-1: USB disconnect, device number 67 [ 1974.136592][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.147508][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1974.160723][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.221923][ T10] usb 3-1: config 0 descriptor?? [ 1974.270078][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1974.469279][ T10] pwc: send_video_command error -71 [ 1974.474767][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1974.483184][ T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1974.580780][ T10] usb 3-1: USB disconnect, device number 65 [ 1974.615382][T19165] loop9: detected capacity change from 0 to 8 [ 1974.627735][T19165] Dev loop9: unable to read RDB block 8 [ 1974.634989][T19165] loop9: unable to read partition table [ 1974.709906][T19165] loop9: partition table beyond EOD, truncated [ 1974.716571][T19165] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1974.755870][T19169] loop0: detected capacity change from 0 to 256 [ 1974.806333][T19169] exfat: Deprecated parameter 'utf8' [ 1974.813105][T19169] exfat: Deprecated parameter 'namecase' [ 1974.819632][T19169] exfat: Deprecated parameter 'utf8' [ 1974.955956][T19169] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1975.000053][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1975.235589][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.246570][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1975.256169][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.305545][ T10] usb 3-1: config 0 descriptor?? [ 1975.342219][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1975.371704][T19175] netlink: 'syz.8.3358': attribute type 10 has an invalid length. [ 1975.740004][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1975.763599][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1975.799002][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1975.819455][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1975.857614][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1976.068595][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 1976.086962][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 1976.105990][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 1976.125534][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 1976.166920][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1976.196216][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1976.248979][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1976.275610][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1976.311915][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1976.349028][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1976.368055][ T10] pwc: Registered as video103. [ 1976.375546][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 1976.453920][ T10] usb 3-1: USB disconnect, device number 66 [ 1976.650821][T19185] loop8: detected capacity change from 0 to 4096 [ 1976.798949][ T9278] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1977.016775][ T9278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.027259][ T9278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1977.040881][ T9278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1977.056200][ T9278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.173226][ T9278] usb 1-1: config 0 descriptor?? [ 1977.191734][T19189] usb usb8: usbfs: process 19189 (syz.2.3364) did not claim interface 0 before use [ 1977.218145][ T9278] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1977.249132][T19191] loop7: detected capacity change from 0 to 256 [ 1977.437630][ T29] audit: type=1326 audit(1741286727.335:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19188 comm="syz.2.3364" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06579 code=0x0 [ 1978.038688][ T9278] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1978.253273][ T9278] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.264824][ T9278] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1978.274320][ T9278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.328885][T19201] loop7: detected capacity change from 0 to 512 [ 1978.357827][ T9278] usb 9-1: config 0 descriptor?? [ 1978.479737][T19201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1978.498913][T19201] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1978.806571][ T9278] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 1978.841896][ T9278] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0027/input/input76 [ 1978.951385][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1979.021042][ T9278] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1979.244357][ T9278] usb 9-1: USB disconnect, device number 68 [ 1979.679809][ T9278] usb 1-1: USB disconnect, device number 70 [ 1980.342087][T19216] netlink: 'syz.2.3372': attribute type 10 has an invalid length. [ 1980.786324][T19223] loop4: detected capacity change from 0 to 512 [ 1980.820545][T19225] loop7: detected capacity change from 0 to 256 [ 1980.840675][T19223] EXT4-fs: Ignoring removed bh option [ 1980.859348][T19225] exfat: Deprecated parameter 'utf8' [ 1980.869537][T19223] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1980.899150][T19223] EXT4-fs (loop4): 1 truncate cleaned up [ 1980.907371][T19223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1981.032331][T19225] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4d5ffc9d, utbl_chksum : 0xe619d30d) [ 1981.126385][T19229] usb usb8: usbfs: process 19229 (syz.8.3378) did not claim interface 0 before use [ 1981.206387][ T29] audit: type=1326 audit(1741286731.105:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19228 comm="syz.8.3378" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 1982.128726][ T9278] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1982.352023][ T9278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1982.362399][ T9278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1982.382513][ T9278] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1982.394461][ T9278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.423709][T19243] loop2: detected capacity change from 0 to 128 [ 1982.498034][ T9278] usb 1-1: config 0 descriptor?? [ 1982.537819][ T9278] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1983.675037][T19258] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 1984.694783][T19265] loop2: detected capacity change from 0 to 64 [ 1985.007937][T12247] usb 1-1: USB disconnect, device number 71 [ 1985.450526][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3393'. [ 1985.479398][T19269] fuse: Unknown parameter '0x0000000000000003' [ 1985.602798][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.118739][T19274] loop4: detected capacity change from 0 to 512 [ 1986.314367][T19274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1986.328202][T19274] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1986.816769][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.112750][T19291] netlink: 'syz.4.3402': attribute type 10 has an invalid length. [ 1987.231225][T19291] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 1987.658692][ T9278] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1987.850908][ T9278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.862588][ T9278] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.873038][ T9278] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1987.886464][ T9278] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1987.896897][ T9278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.948067][ T9278] usb 8-1: config 0 descriptor?? [ 1988.310036][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1988.429702][ T9278] usbhid 8-1:0.0: can't add hid device: -71 [ 1988.430418][T19300] loop4: detected capacity change from 0 to 4096 [ 1988.436572][ T9278] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1988.468110][ T9278] usb 8-1: USB disconnect, device number 47 [ 1988.514770][T19300] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1988.678746][T19305] fuse: Unknown parameter '0x0000000000000003' [ 1989.178008][ T29] audit: type=1800 audit(1741286739.055:76): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3406" name="file2" dev="loop4" ino=31 res=0 errno=0 [ 1989.885454][T19315] loop7: detected capacity change from 0 to 512 [ 1990.235404][T19315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1990.250264][T19315] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1990.578123][T19329] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 1990.643428][T19330] loop0: detected capacity change from 0 to 256 [ 1990.691106][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1990.741192][T19330] exfat: Deprecated parameter 'utf8' [ 1990.747053][T19330] exfat: Deprecated parameter 'namecase' [ 1990.754565][T19330] exfat: Deprecated parameter 'utf8' [ 1990.918847][T19330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1991.517969][T19337] loop4: detected capacity change from 0 to 512 [ 1991.636359][T19337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1991.650163][T19337] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1991.793903][T19341] fuse: Unknown parameter '0x0000000000000003' [ 1991.871036][T19337] EXT4-fs error (device loop4): ext4_get_first_dir_block:3552: inode #12: comm syz.4.3420: directory missing '.' [ 1991.908692][T19337] EXT4-fs (loop4): Remounting filesystem read-only [ 1992.201518][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1992.355938][T19345] loop0: detected capacity change from 0 to 64 [ 1992.419741][T12247] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1992.627950][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1992.640204][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1992.650839][T12247] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1992.664603][T12247] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1992.674265][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.811872][T12247] usb 9-1: config 0 descriptor?? [ 1992.889150][T19349] loop2: detected capacity change from 0 to 2048 [ 1993.008692][T19349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1993.270035][T12247] usbhid 9-1:0.0: can't add hid device: -71 [ 1993.276721][T12247] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1993.339003][T12247] usb 9-1: USB disconnect, device number 69 [ 1993.727019][T19355] loop4: detected capacity change from 0 to 512 [ 1993.897648][T19355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1993.914449][T19355] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1993.950731][T19362] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 1994.465469][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.613112][T19369] fuse: Unknown parameter '0x0000000000000003' [ 1995.699036][T12247] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1995.888844][T12247] usb 9-1: Using ep0 maxpacket: 8 [ 1995.921163][T12247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1995.929318][T12247] usb 9-1: can't read configurations, error -61 [ 1996.099026][T12247] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1996.309552][T12247] usb 9-1: Using ep0 maxpacket: 8 [ 1996.349874][T12247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1996.357929][T12247] usb 9-1: can't read configurations, error -61 [ 1996.380376][T12247] usb usb9-port1: attempt power cycle [ 1996.740471][T12247] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1996.797780][T12247] usb 9-1: Using ep0 maxpacket: 8 [ 1996.837692][T12247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1996.845954][T12247] usb 9-1: can't read configurations, error -61 [ 1996.860423][ T9278] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1996.907217][T19385] loop7: detected capacity change from 0 to 1024 [ 1996.946279][T19385] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1996.958078][T19385] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1997.003733][T19385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1997.029835][T12247] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1997.056507][ T9278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.067214][ T9278] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1997.076861][ T9278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.091991][ T9278] usb 5-1: config 0 descriptor?? [ 1997.101381][T12247] usb 9-1: Using ep0 maxpacket: 8 [ 1997.110779][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 1997.196803][T12247] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1997.205032][T12247] usb 9-1: can't read configurations, error -61 [ 1997.256183][T12247] usb usb9-port1: unable to enumerate USB device [ 1997.345545][ T9278] pwc: send_video_command error -71 [ 1997.353184][ T9278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1997.362459][ T9278] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1997.425745][ T9278] usb 5-1: USB disconnect, device number 84 [ 1997.577268][T19391] loop0: detected capacity change from 0 to 64 [ 1997.644674][T19385] fscrypt (loop7): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 1997.702929][ T29] audit: type=1800 audit(1741286747.595:77): pid=19391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3441" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1997.947628][ T9278] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1997.965037][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1998.139831][ T9278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.156528][ T9278] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1998.168477][ T9278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.199059][ T9278] usb 5-1: config 0 descriptor?? [ 1998.222827][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 1998.628994][ T9278] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1998.648119][ T9278] pwc: recv_control_msg error -32 req 02 val 2700 [ 1998.696131][ T9278] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1998.719227][ T9278] pwc: recv_control_msg error -32 req 04 val 1000 [ 1998.804062][ T9278] pwc: recv_control_msg error -32 req 04 val 1300 [ 1999.044750][ T9278] pwc: recv_control_msg error -71 req 02 val 2000 [ 1999.062023][ T9278] pwc: recv_control_msg error -71 req 02 val 2100 [ 1999.089696][T19401] netlink: 'syz.8.3444': attribute type 10 has an invalid length. [ 1999.109462][ T9278] pwc: recv_control_msg error -71 req 04 val 1500 [ 1999.135850][ T9278] pwc: recv_control_msg error -71 req 02 val 2500 [ 1999.136787][T19403] loop0: detected capacity change from 0 to 512 [ 1999.153873][ T9278] pwc: recv_control_msg error -71 req 02 val 2400 [ 1999.184367][ T9278] pwc: recv_control_msg error -71 req 02 val 2600 [ 1999.196904][ T9278] pwc: recv_control_msg error -71 req 02 val 2900 [ 1999.226011][ T9278] pwc: recv_control_msg error -71 req 02 val 2800 [ 1999.251511][ T9278] pwc: recv_control_msg error -71 req 04 val 1100 [ 1999.283709][ T9278] pwc: recv_control_msg error -71 req 04 val 1200 [ 1999.305609][ T9278] pwc: Registered as video103. [ 1999.313314][ T9278] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input77 [ 1999.349965][ T9278] usb 5-1: USB disconnect, device number 85 [ 1999.380546][T19403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1999.396470][T19403] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.920624][T14835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2000.084367][T19414] ALSA: mixer_oss: invalid OSS volume 'ÿÿÿÿ' [ 2000.675845][T12247] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2000.906418][T12247] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 2000.920771][T12247] usb 1-1: config 0 has no interface number 0 [ 2000.927185][T12247] usb 1-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2000.938481][T12247] usb 1-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2000.949781][T12247] usb 1-1: config 0 interface 7 has no altsetting 0 [ 2000.956751][T12247] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2000.966319][T12247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.156356][T12247] usb 1-1: config 0 descriptor?? [ 2001.186777][T19418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2001.510916][T12247] usb 1-1: string descriptor 0 read error: -71 [ 2001.519737][T12247] usb 1-1: Error in usbnet_get_endpoints (-22) [ 2001.635261][T12247] usb 1-1: USB disconnect, device number 72 [ 2002.792892][T19443] netlink: 'syz.0.3457': attribute type 10 has an invalid length. [ 2002.974629][T19446] loop8: detected capacity change from 0 to 512 [ 2003.073716][ T9278] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2003.105718][T19446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2003.120121][T19446] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2003.249072][ T9278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.259918][ T9278] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2003.276254][ T9278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.340437][T19454] loop7: detected capacity change from 0 to 4096 [ 2003.352339][ T9278] usb 5-1: config 0 descriptor?? [ 2003.386992][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2003.593527][ T9278] pwc: send_video_command error -71 [ 2003.600439][ T9278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2003.608948][ T9278] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2003.670037][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2003.670352][ T9278] usb 5-1: USB disconnect, device number 86 [ 2004.148709][ T9278] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2005.097076][ T9278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.115573][ T9278] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2005.127781][ T9278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.171424][ T9278] usb 5-1: config 0 descriptor?? [ 2005.238231][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2005.842212][ T9278] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2005.865128][ T9278] pwc: recv_control_msg error -32 req 02 val 2700 [ 2005.895443][ T9278] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2005.910309][ T9278] pwc: recv_control_msg error -32 req 04 val 1000 [ 2005.919844][T12247] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2005.937574][ T9278] pwc: recv_control_msg error -32 req 04 val 1300 [ 2006.151124][T12247] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 2006.159871][T12247] usb 3-1: config 0 has no interface number 0 [ 2006.166407][T12247] usb 3-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2006.177779][T12247] usb 3-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2006.189347][T12247] usb 3-1: config 0 interface 7 has no altsetting 0 [ 2006.196474][T12247] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2006.206176][T12247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.220857][ T9278] pwc: recv_control_msg error -71 req 02 val 2000 [ 2006.249444][ T9278] pwc: recv_control_msg error -71 req 02 val 2100 [ 2006.299727][ T9278] pwc: recv_control_msg error -71 req 04 val 1500 [ 2006.304291][T12247] usb 3-1: config 0 descriptor?? [ 2006.315672][T19471] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2006.330960][ T9278] pwc: recv_control_msg error -71 req 02 val 2500 [ 2006.398854][ T9278] pwc: recv_control_msg error -71 req 02 val 2400 [ 2006.417900][ T9278] pwc: recv_control_msg error -71 req 02 val 2600 [ 2006.445841][ T9278] pwc: recv_control_msg error -71 req 02 val 2900 [ 2006.457832][ T9278] pwc: recv_control_msg error -71 req 02 val 2800 [ 2006.484714][ T9278] pwc: recv_control_msg error -71 req 04 val 1100 [ 2006.500149][ T9278] pwc: recv_control_msg error -71 req 04 val 1200 [ 2006.549156][ T9278] pwc: Registered as video103. [ 2006.556398][ T9278] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 2006.630909][T12247] usb 3-1: string descriptor 0 read error: -71 [ 2006.639997][T12247] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2006.660883][ T9278] usb 5-1: USB disconnect, device number 87 [ 2006.691954][T12247] usb 3-1: USB disconnect, device number 67 [ 2006.966030][T19482] netlink: 'syz.7.3472': attribute type 10 has an invalid length. [ 2007.998087][T19490] loop2: detected capacity change from 0 to 512 [ 2008.201197][T19490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2008.214760][T19490] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2008.681743][T14929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.973114][T12247] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2009.148664][T12247] usb 8-1: Using ep0 maxpacket: 32 [ 2009.171886][T12247] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 2009.181347][T12247] usb 8-1: config 0 has no interface number 0 [ 2009.187760][T12247] usb 8-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 21760, setting to 1024 [ 2009.199953][T12247] usb 8-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2009.280865][T12247] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2009.290682][T12247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.299194][T12247] usb 8-1: Product: syz [ 2009.303640][T12247] usb 8-1: Manufacturer: syz [ 2009.311376][T12247] usb 8-1: SerialNumber: syz [ 2009.324315][T12247] usb 8-1: config 0 descriptor?? [ 2009.347102][T19504] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2009.389399][ T9278] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2009.415396][T12247] smsc95xx v2.0.0 [ 2009.588231][ T9278] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.599822][ T9278] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2009.609374][ T9278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.658058][T19504] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2009.738114][ T9278] usb 9-1: config 0 descriptor?? [ 2009.780261][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2009.980901][ T9278] pwc: send_video_command error -71 [ 2009.986830][ T9278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2009.995579][ T9278] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 2010.019537][ T9278] usb 9-1: USB disconnect, device number 74 [ 2010.073109][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2010.272522][ T10] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 2010.281303][ T10] usb 5-1: config 0 has no interface number 0 [ 2010.287760][ T10] usb 5-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2010.299442][ T10] usb 5-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2010.311524][ T10] usb 5-1: config 0 interface 7 has no altsetting 0 [ 2010.318605][ T10] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2010.327956][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.483544][ T10] usb 5-1: config 0 descriptor?? [ 2010.495967][T19515] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2010.589533][ T9278] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2010.796181][ T9278] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.807516][ T9278] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2010.817525][ T9278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.837655][ T10] usb 5-1: string descriptor 0 read error: -71 [ 2010.855204][ T10] usb 5-1: Error in usbnet_get_endpoints (-22) [ 2010.887925][ T10] usb 5-1: USB disconnect, device number 88 [ 2010.902979][ T9278] usb 9-1: config 0 descriptor?? [ 2010.924387][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2011.262047][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2011.269063][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.336181][ T9278] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2011.385303][ T9278] pwc: recv_control_msg error -32 req 02 val 2700 [ 2011.416508][ T9278] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2011.450770][ T9278] pwc: recv_control_msg error -32 req 04 val 1000 [ 2011.499706][ T9278] pwc: recv_control_msg error -32 req 04 val 1300 [ 2011.676086][T19528] loop0: detected capacity change from 0 to 256 [ 2011.711897][T19528] exfat: Deprecated parameter 'utf8' [ 2011.719174][T19528] exfat: Deprecated parameter 'namecase' [ 2011.725341][T19528] exfat: Deprecated parameter 'utf8' [ 2011.741923][ T9278] pwc: recv_control_msg error -71 req 02 val 2000 [ 2011.759241][ T9278] pwc: recv_control_msg error -71 req 02 val 2100 [ 2011.814514][ T9278] pwc: recv_control_msg error -71 req 04 val 1500 [ 2011.883386][ T9278] pwc: recv_control_msg error -71 req 02 val 2500 [ 2011.894826][T12247] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2011.906197][T12247] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2011.928961][ T9278] pwc: recv_control_msg error -71 req 02 val 2400 [ 2011.941204][T19528] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2011.988958][ T9278] pwc: recv_control_msg error -71 req 02 val 2600 [ 2012.014666][T12247] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2012.026807][ T9278] pwc: recv_control_msg error -71 req 02 val 2900 [ 2012.027105][T12247] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 2012.059389][ T9278] pwc: recv_control_msg error -71 req 02 val 2800 [ 2012.099071][ T9278] pwc: recv_control_msg error -71 req 04 val 1100 [ 2012.123479][ T9278] pwc: recv_control_msg error -71 req 04 val 1200 [ 2012.156718][ T9278] pwc: Registered as video103. [ 2012.164297][ T9278] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input79 [ 2012.169057][T12247] usb 8-1: USB disconnect, device number 48 [ 2012.262435][ T9278] usb 9-1: USB disconnect, device number 75 [ 2012.371918][T19534] loop7: detected capacity change from 0 to 512 [ 2012.603966][T19534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2012.617568][T19534] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2013.041468][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 2013.052313][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2013.999117][ T9278] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2014.256394][ T9278] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 2014.265135][ T9278] usb 3-1: config 0 has no interface number 0 [ 2014.272501][ T9278] usb 3-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2014.282814][ T9278] usb 3-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2014.294232][ T9278] usb 3-1: config 0 interface 7 has no altsetting 0 [ 2014.301328][ T9278] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2014.310961][ T9278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.363340][ T9278] usb 3-1: config 0 descriptor?? [ 2014.375982][T19557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2014.722497][ T9278] usb 3-1: string descriptor 0 read error: -71 [ 2014.731300][ T9278] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2014.800325][ T9278] usb 3-1: USB disconnect, device number 68 [ 2014.952512][T19565] loop7: detected capacity change from 0 to 256 [ 2014.980284][T19565] exfat: Deprecated parameter 'utf8' [ 2014.986138][T19565] exfat: Deprecated parameter 'namecase' [ 2014.992565][T19565] exfat: Deprecated parameter 'utf8' [ 2015.079387][T19565] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2015.118819][T12247] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2015.300400][T12247] usb 1-1: Using ep0 maxpacket: 8 [ 2015.353643][T12247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2015.387417][T12247] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2015.397210][T12247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.406027][T12247] usb 1-1: Product: syz [ 2015.410639][T12247] usb 1-1: Manufacturer: syz [ 2015.415479][T12247] usb 1-1: SerialNumber: syz [ 2015.471058][T12247] usb 1-1: config 0 descriptor?? [ 2015.520875][T12247] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2015.928749][ T9278] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2016.145146][ T9278] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.156198][ T9278] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2016.172110][ T9278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.260884][ T9278] usb 8-1: config 0 descriptor?? [ 2016.293177][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2016.532492][ T9278] pwc: send_video_command error -71 [ 2016.538161][ T9278] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2016.546730][ T9278] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 2016.591499][T19571] loop2: detected capacity change from 0 to 256 [ 2016.633248][ T9278] usb 8-1: USB disconnect, device number 49 [ 2016.814172][T19571] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 2017.079250][ T9278] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 2017.324972][ T9278] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.335732][ T9278] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2017.345465][ T9278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.413696][ T9278] usb 8-1: config 0 descriptor?? [ 2017.454727][ T9278] pwc: Askey VC010 type 2 USB webcam detected. [ 2017.566623][T12247] gspca_zc3xx: reg_r err -32 [ 2017.848513][ T9278] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2017.887547][ T9278] pwc: recv_control_msg error -32 req 02 val 2700 [ 2017.927884][ T9278] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2017.949819][ T9278] pwc: recv_control_msg error -32 req 04 val 1000 [ 2017.983688][ T9278] pwc: recv_control_msg error -32 req 04 val 1300 [ 2018.180385][T12247] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2018.187256][T12247] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2018.240042][ T9278] pwc: recv_control_msg error -71 req 02 val 2000 [ 2018.270606][ T9278] pwc: recv_control_msg error -71 req 02 val 2100 [ 2018.279987][ T9278] pwc: recv_control_msg error -71 req 04 val 1500 [ 2018.300326][ T9278] pwc: recv_control_msg error -71 req 02 val 2500 [ 2018.328014][ T9278] pwc: recv_control_msg error -71 req 02 val 2400 [ 2018.349247][ T9278] pwc: recv_control_msg error -71 req 02 val 2600 [ 2018.369916][ T9278] pwc: recv_control_msg error -71 req 02 val 2900 [ 2018.383959][ T9278] pwc: recv_control_msg error -71 req 02 val 2800 [ 2018.400840][ T9278] pwc: recv_control_msg error -71 req 04 val 1100 [ 2018.436671][ T9278] pwc: recv_control_msg error -71 req 04 val 1200 [ 2018.456426][ T9278] pwc: Registered as video103. [ 2018.463962][ T9278] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input80 [ 2018.509892][ T9278] usb 8-1: USB disconnect, device number 50 [ 2019.099162][ T9278] usb 1-1: USB disconnect, device number 73 [ 2019.360667][T12247] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2019.579276][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2019.591567][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2019.601911][T12247] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2019.615825][T12247] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2019.625599][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2019.753848][T12247] usb 9-1: config 0 descriptor?? [ 2020.072174][T19585] loop7: detected capacity change from 0 to 1024 [ 2020.097895][T19585] EXT4-fs: Ignoring removed orlov option [ 2020.155457][T19585] EXT4-fs (loop7): Test dummy encryption mode enabled [ 2020.199728][T19585] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2020.230290][T12247] usbhid 9-1:0.0: can't add hid device: -71 [ 2020.237116][T12247] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2020.290126][T12247] usb 9-1: USB disconnect, device number 76 [ 2020.318968][T19591] loop0: detected capacity change from 0 to 256 [ 2020.331060][T19585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2020.345079][T19591] exfat: Deprecated parameter 'utf8' [ 2020.351340][T19591] exfat: Deprecated parameter 'namecase' [ 2020.357455][T19591] exfat: Deprecated parameter 'utf8' [ 2020.651221][T19591] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2021.093189][T19585] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 2021.171758][T19585] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 2021.358710][T12247] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2021.535033][T19601] loop0: detected capacity change from 0 to 1024 [ 2021.564843][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2021.592472][T12247] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 2021.604891][T12247] usb 3-1: config 0 has no interface number 0 [ 2021.612294][T12247] usb 3-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2021.623985][T12247] usb 3-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2021.636173][T12247] usb 3-1: config 0 interface 7 has no altsetting 0 [ 2021.644271][T12247] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2021.655304][T12247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.751380][T19601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2021.761326][T12247] usb 3-1: config 0 descriptor?? [ 2021.764396][T19601] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2021.774994][T19597] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2021.998855][T19599] loop8: detected capacity change from 0 to 4096 [ 2022.045635][T19599] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 2022.156777][T12247] usb 3-1: string descriptor 0 read error: -71 [ 2022.166012][T12247] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2022.240035][T12247] usb 3-1: USB disconnect, device number 69 [ 2022.344305][T19599] ntfs3(loop8): ino=1a, mi_enum_attr [ 2022.350496][T19599] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 2022.380855][T19599] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 2022.459285][T12196] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2022.670769][T12196] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.681734][T12196] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2022.691313][T12196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.751692][T12196] usb 8-1: config 0 descriptor?? [ 2022.787657][T12196] pwc: Askey VC010 type 2 USB webcam detected. [ 2022.987481][T12196] pwc: send_video_command error -71 [ 2022.993383][T12196] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2023.001805][T12196] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 2023.017448][T12196] usb 8-1: USB disconnect, device number 51 [ 2023.073419][ T29] audit: type=1800 audit(1741286772.975:78): pid=19601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3517" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2023.109355][T19601] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2023.455995][T14835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2024.161796][ T9278] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2024.338799][ T9278] usb 1-1: Using ep0 maxpacket: 8 [ 2024.380134][ T9278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2024.426364][ T9278] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2024.436892][ T9278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.445781][ T9278] usb 1-1: Product: syz [ 2024.450343][ T9278] usb 1-1: Manufacturer: syz [ 2024.455404][ T9278] usb 1-1: SerialNumber: syz [ 2024.550886][ T9278] usb 1-1: config 0 descriptor?? [ 2024.580946][ T9278] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2025.819672][T19621] loop7: detected capacity change from 0 to 64 [ 2026.542505][T19623] loop7: detected capacity change from 0 to 256 [ 2026.584736][T19623] exfat: Deprecated parameter 'utf8' [ 2026.593861][T19623] exfat: Deprecated parameter 'namecase' [ 2026.601311][T19623] exfat: Deprecated parameter 'utf8' [ 2026.648664][ T9278] gspca_zc3xx: reg_r err -32 [ 2026.847613][T19623] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2026.999899][T12196] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2027.221154][T12196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.235897][T12196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.247223][T12196] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2027.260782][T12196] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2027.270509][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.286012][ T9278] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2027.293276][ T9278] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2027.305436][T12196] usb 5-1: config 0 descriptor?? [ 2028.019247][T12196] usbhid 5-1:0.0: can't add hid device: -71 [ 2028.026161][T12196] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2028.088645][T12196] usb 5-1: USB disconnect, device number 89 [ 2028.216196][ T9278] usb 1-1: USB disconnect, device number 74 [ 2028.497374][T19634] loop8: detected capacity change from 0 to 64 [ 2028.721593][ T29] audit: type=1800 audit(1741286778.625:79): pid=19634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3531" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 2028.829052][T12196] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2029.093449][T12196] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 2029.103502][T12196] usb 1-1: config 0 has no interface number 0 [ 2029.110071][T12196] usb 1-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2029.120444][T12196] usb 1-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2029.131739][T12196] usb 1-1: config 0 interface 7 has no altsetting 0 [ 2029.138859][T12196] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2029.148503][T12196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.184908][T12196] usb 1-1: config 0 descriptor?? [ 2029.240485][T19635] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2029.373882][T19637] loop4: detected capacity change from 0 to 1024 [ 2029.513291][T12196] usb 1-1: string descriptor 0 read error: -71 [ 2029.522402][T12196] usb 1-1: Error in usbnet_get_endpoints (-22) [ 2029.545250][T19637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2029.558634][T19637] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2029.655222][T12196] usb 1-1: USB disconnect, device number 75 [ 2029.729092][T12247] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 2029.917312][T12247] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2029.928417][T12247] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2029.938160][T12247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.018726][T12247] usb 8-1: config 0 descriptor?? [ 2030.036197][T12247] pwc: Askey VC010 type 2 USB webcam detected. [ 2030.251643][T12247] pwc: send_video_command error -71 [ 2030.257149][T12247] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2030.265744][T12247] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 2030.309696][T12247] usb 8-1: USB disconnect, device number 52 [ 2030.375181][T19631] loop2: detected capacity change from 0 to 32768 [ 2030.627027][T19649] loop0: detected capacity change from 0 to 64 [ 2031.022755][T19637] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2031.047395][T19651] loop8: detected capacity change from 0 to 2048 [ 2031.191714][T19651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2031.304059][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2032.128704][T12196] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2032.318633][T12196] usb 5-1: Using ep0 maxpacket: 8 [ 2032.329545][T14110] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2032.373406][T12196] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2032.413116][T12196] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2032.422979][T12196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.431480][T12196] usb 5-1: Product: syz [ 2032.435916][T12196] usb 5-1: Manufacturer: syz [ 2032.440924][T12196] usb 5-1: SerialNumber: syz [ 2032.521330][T12196] usb 5-1: config 0 descriptor?? [ 2032.545807][T19663] loop2: detected capacity change from 0 to 256 [ 2032.567936][T14110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.579751][T14110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.590512][T14110] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2032.592424][T19663] exfat: Deprecated parameter 'utf8' [ 2032.604161][T14110] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2032.604319][T14110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.610125][T19663] exfat: Deprecated parameter 'namecase' [ 2032.633912][T19663] exfat: Deprecated parameter 'utf8' [ 2032.647809][T12196] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2032.714327][T19663] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 2032.772870][T14110] usb 1-1: config 0 descriptor?? [ 2033.421729][T14110] usbhid 1-1:0.0: can't add hid device: -71 [ 2033.429301][T14110] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2033.465089][T14110] usb 1-1: USB disconnect, device number 76 [ 2034.642124][T12196] gspca_zc3xx: reg_r err -32 [ 2035.079018][T19643] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 2035.239089][T12196] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2035.246065][T12196] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2035.307845][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2036.079567][ T9278] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2036.294358][ T9278] usb 9-1: config 0 has an invalid interface number: 7 but max is 0 [ 2036.303091][ T9278] usb 9-1: config 0 has no interface number 0 [ 2036.303432][T12196] usb 5-1: USB disconnect, device number 90 [ 2036.309597][ T9278] usb 9-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2036.326099][ T9278] usb 9-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2036.337566][ T9278] usb 9-1: config 0 interface 7 has no altsetting 0 [ 2036.350749][ T9278] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2036.362666][ T9278] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.501661][ T9278] usb 9-1: config 0 descriptor?? [ 2036.511406][T19675] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2037.079252][T12196] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2037.277161][T12196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2037.288867][T12196] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2037.299570][T12196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2037.309814][T12196] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2037.320114][T12196] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2037.330559][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.510794][T12196] usb 5-1: config 0 descriptor?? [ 2037.522633][ T9278] usb 9-1: string descriptor 0 read error: -71 [ 2037.531381][ T9278] usb 9-1: Error in usbnet_get_endpoints (-22) [ 2037.651363][ T9278] usb 9-1: USB disconnect, device number 77 [ 2037.746257][T12196] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 2037.754179][T12196] hdpvr 5-1:0.0: device init failed [ 2037.760331][T12196] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 2038.819433][ T9278] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2038.979018][ T9278] usb 9-1: Using ep0 maxpacket: 16 [ 2039.033441][ T9278] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.044351][ T9278] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2039.111986][ T9278] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2039.121526][ T9278] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.130067][ T9278] usb 9-1: Product: syz [ 2039.134510][ T9278] usb 9-1: Manufacturer: syz [ 2039.139671][ T9278] usb 9-1: SerialNumber: syz [ 2039.202409][ T9278] usb 9-1: config 0 descriptor?? [ 2039.865947][T19687] loop2: detected capacity change from 0 to 32768 [ 2039.979009][T19698] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3555'. [ 2039.986025][ T9278] usb 5-1: USB disconnect, device number 91 [ 2040.182445][T19687] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 2040.200879][T19687] bcachefs (loop2): initializing new filesystem [ 2040.215407][T19687] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 2040.226205][T19687] bcachefs (loop2): going read-write [ 2040.243949][T19687] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 2040.256607][T19687] bcachefs (loop2): going read-only [ 2040.262337][T19687] bcachefs (loop2): finished waiting for writes to stop [ 2040.269919][T19687] bcachefs (loop2): flushing journal and stopping allocators, journal seq 0 [ 2040.283829][T19687] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 0 [ 2040.300175][T19687] bcachefs (loop2): clean shutdown complete, journal seq 1 [ 2040.308507][T19687] bcachefs (loop2): done going read-only, filesystem not clean [ 2040.316341][T19687] bcachefs (loop2): bch2_fs_initialize(): error EINTR [ 2040.324660][T19687] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 2040.341811][T19687] bcachefs (loop2): shutting down [ 2040.383026][T19687] bcachefs (loop2): shutdown complete [ 2040.408547][T12196] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2040.899122][ T9278] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 2041.094423][ T9278] usb 8-1: Using ep0 maxpacket: 8 [ 2041.119339][ T9278] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2041.129881][ T9278] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.142029][ T9278] usb 8-1: config 179 has no interface number 0 [ 2041.149915][ T9278] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2041.167876][ T9278] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.362145][T12196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.372908][T12196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2041.390975][T12196] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2041.400524][T12196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2041.409156][T12196] usb 1-1: SerialNumber: syz [ 2042.070585][ T9278] usb 8-1: USB disconnect, device number 53 [ 2042.190678][ T10] usb 9-1: USB disconnect, device number 78 [ 2042.372674][T19695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2042.487040][T12196] usb 1-1: 0:2 : does not exist [ 2042.493796][T12196] usb 1-1: unit 5: unexpected type 0x0d [ 2042.543549][T12196] usb 1-1: USB disconnect, device number 77 [ 2042.908804][T12247] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2043.106217][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.118174][T12247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.128859][T12247] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2043.142759][T12247] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2043.152389][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.361471][T12247] usb 9-1: config 0 descriptor?? [ 2043.504797][T19687] bcachefs: bch2_fs_get_tree() error: EINTR [ 2043.831084][T12196] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2044.010596][T12196] usb 1-1: Using ep0 maxpacket: 8 [ 2044.047371][T12196] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2044.074075][T12247] usbhid 9-1:0.0: can't add hid device: -71 [ 2044.081436][T12247] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2044.121013][T12196] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2044.133057][T12196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.142706][T12196] usb 1-1: Product: syz [ 2044.147155][T12196] usb 1-1: Manufacturer: syz [ 2044.152272][T12196] usb 1-1: SerialNumber: syz [ 2044.166535][T12247] usb 9-1: USB disconnect, device number 79 [ 2044.231667][T12196] usb 1-1: config 0 descriptor?? [ 2044.268667][T12196] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2045.340829][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2045.546230][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2045.563662][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2045.576048][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2045.586443][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2045.591051][T12247] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2045.596683][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2045.613910][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.630490][ T10] usb 5-1: config 0 descriptor?? [ 2045.859152][T12247] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 2045.870562][T12247] usb 3-1: config 0 has no interface number 0 [ 2045.876955][T12247] usb 3-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2045.888566][T12247] usb 3-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2045.900373][T12247] usb 3-1: config 0 interface 7 has no altsetting 0 [ 2045.907527][T12247] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2045.917270][T12247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.027663][T12247] usb 3-1: config 0 descriptor?? [ 2046.149898][T19739] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2046.399576][T12196] gspca_zc3xx: reg_r err -32 [ 2046.451781][ T10] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 2046.459673][ T10] hdpvr 5-1:0.0: device init failed [ 2046.465376][ T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 2046.556361][T12247] usb 3-1: string descriptor 0 read error: -71 [ 2046.565009][T12247] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2046.587412][ T9278] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2046.646053][T12247] usb 3-1: USB disconnect, device number 70 [ 2046.809028][ T9278] usb 9-1: Using ep0 maxpacket: 16 [ 2046.833599][ T9278] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2046.843475][ T9278] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.851955][ T9278] usb 9-1: Product: syz [ 2046.856390][ T9278] usb 9-1: Manufacturer: syz [ 2046.861366][ T9278] usb 9-1: SerialNumber: syz [ 2046.877124][ T9278] usb 9-1: config 0 descriptor?? [ 2047.460634][T12196] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2047.467449][T12196] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2047.636870][T19752] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3571'. [ 2047.829204][T14110] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2047.866602][ T9278] usb 1-1: USB disconnect, device number 78 [ 2047.919978][T12196] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 2047.992585][T14110] usb 3-1: Using ep0 maxpacket: 8 [ 2048.020046][T14110] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2048.028799][T14110] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.039541][T14110] usb 3-1: config 179 has no interface number 0 [ 2048.046140][T14110] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2048.055759][T14110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.157565][T12196] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.168619][T12196] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2048.187009][T12196] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2048.197675][T12196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2048.206460][T12196] usb 8-1: SerialNumber: syz [ 2048.224632][ T9278] usb 5-1: USB disconnect, device number 92 [ 2048.454177][T12196] usb 8-1: 0:2 : does not exist [ 2048.459790][T12196] usb 8-1: unit 5: unexpected type 0x0d [ 2048.472572][T19751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2048.508957][T12196] usb 8-1: USB disconnect, device number 54 [ 2048.649609][T19760] loop4: detected capacity change from 0 to 1024 [ 2048.696275][ T9278] usb 3-1: USB disconnect, device number 71 [ 2048.697603][T19760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2048.716012][T19760] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2048.763535][T14110] usb 9-1: USB disconnect, device number 80 [ 2050.027919][ T9278] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2050.253251][ T9278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.272966][ T9278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.285984][ T9278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2050.300026][ T9278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2050.307856][T19760] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 2050.309391][ T9278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.327059][T19760] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2050.380046][ T9278] usb 3-1: config 0 descriptor?? [ 2050.864135][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2051.040135][ T10] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 2051.082666][ T9278] usbhid 3-1:0.0: can't add hid device: -71 [ 2051.099696][ T9278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2051.134938][ T9286] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2051.170833][ T9278] usb 3-1: USB disconnect, device number 72 [ 2051.319958][ T9286] usb 9-1: Using ep0 maxpacket: 8 [ 2051.342797][ T10] usb 8-1: config 0 has an invalid interface number: 7 but max is 0 [ 2051.351842][ T10] usb 8-1: config 0 has no interface number 0 [ 2051.358493][ T10] usb 8-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2051.368746][ T10] usb 8-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2051.380205][ T10] usb 8-1: config 0 interface 7 has no altsetting 0 [ 2051.387273][ T10] usb 8-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2051.403497][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.461347][ T9286] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2051.513164][ T9286] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2051.522908][ T9286] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.531404][ T9286] usb 9-1: Product: syz [ 2051.535835][ T9286] usb 9-1: Manufacturer: syz [ 2051.540963][ T9286] usb 9-1: SerialNumber: syz [ 2051.567251][ T9286] usb 9-1: config 0 descriptor?? [ 2051.585575][ T10] usb 8-1: config 0 descriptor?? [ 2051.602768][T19781] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2051.631277][ T9286] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2052.128758][T14110] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2052.228184][ T10] usb 8-1: string descriptor 0 read error: -71 [ 2052.239971][ T10] usb 8-1: Error in usbnet_get_endpoints (-22) [ 2052.261058][ T10] usb 8-1: USB disconnect, device number 55 [ 2052.364618][T14110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2052.375426][T14110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2052.387009][T14110] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2052.397687][T14110] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2052.408810][T14110] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2052.421087][T14110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.456346][T14110] usb 5-1: config 0 descriptor?? [ 2052.590027][T12196] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2052.719976][T14110] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 2052.731945][T14110] hdpvr 5-1:0.0: device init failed [ 2052.737676][T14110] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 2052.829609][T12196] usb 3-1: Using ep0 maxpacket: 16 [ 2052.859510][T12196] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2052.869155][T12196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.877463][T12196] usb 3-1: Product: syz [ 2052.882226][T12196] usb 3-1: Manufacturer: syz [ 2052.887099][T12196] usb 3-1: SerialNumber: syz [ 2052.915906][T12196] usb 3-1: config 0 descriptor?? [ 2052.954881][T19794] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3586'. [ 2053.258855][T12196] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 2053.435714][T12196] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.449279][T12196] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2053.477863][T12196] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2053.488146][T12196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2053.498030][T12196] usb 8-1: SerialNumber: syz [ 2053.785633][T12196] usb 8-1: 0:2 : does not exist [ 2053.791354][T12196] usb 8-1: unit 5: unexpected type 0x0d [ 2053.810196][T19793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2053.867566][T12196] usb 8-1: USB disconnect, device number 56 [ 2053.878205][ T9286] gspca_zc3xx: reg_r err -32 [ 2054.080156][T14110] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2054.243180][T14110] usb 1-1: Using ep0 maxpacket: 8 [ 2054.256384][T14110] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 2054.268023][T14110] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.280281][T14110] usb 1-1: config 179 has no interface number 0 [ 2054.286844][T14110] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2054.300750][T14110] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2054.310406][T14110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.488694][ T9286] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2054.495908][ T9286] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2054.800288][T14110] usb 1-1: USB disconnect, device number 79 [ 2055.009837][ T9286] usb 5-1: USB disconnect, device number 93 [ 2055.457430][ T9286] usb 9-1: USB disconnect, device number 81 [ 2055.877105][T14110] usb 3-1: USB disconnect, device number 73 [ 2056.229460][T19816] loop7: detected capacity change from 0 to 1024 [ 2056.518643][T19816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2056.534172][T19816] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2056.539228][T14110] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2056.675595][T19816] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2056.839197][T14110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2056.850874][T14110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2056.861287][T14110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2056.874835][T14110] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2056.884363][T14110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.163843][T14110] usb 3-1: config 0 descriptor?? [ 2057.211730][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2057.354091][T12196] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2057.871643][T19833] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3598'. [ 2058.077858][T12196] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 2058.086458][T12196] usb 1-1: config 0 has no interface number 0 [ 2058.093094][T12196] usb 1-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2058.103330][T12196] usb 1-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2058.114680][T12196] usb 1-1: config 0 interface 7 has no altsetting 0 [ 2058.121900][T12196] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2058.137512][T12196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.155394][T14110] usbhid 3-1:0.0: can't add hid device: -71 [ 2058.171982][T14110] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2058.189207][T14110] usb 3-1: USB disconnect, device number 74 [ 2058.209645][T12196] usb 1-1: config 0 descriptor?? [ 2058.219759][T19827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2058.462679][T12196] usb 1-1: string descriptor 0 read error: -71 [ 2058.471611][T12196] usb 1-1: Error in usbnet_get_endpoints (-22) [ 2058.492745][T12247] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2058.520400][T12196] usb 1-1: USB disconnect, device number 80 [ 2058.676011][T12247] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.687146][T12247] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2058.732232][T12247] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2058.742571][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2058.751646][T12247] usb 9-1: SerialNumber: syz [ 2058.783423][ T9286] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2058.958613][ T9286] usb 5-1: Using ep0 maxpacket: 32 [ 2058.992540][T19831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2058.996881][T12247] usb 9-1: 0:2 : does not exist [ 2059.007848][T12247] usb 9-1: unit 5: unexpected type 0x0d [ 2059.032536][ T9286] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 2059.041435][ T9286] usb 5-1: config 0 has no interface number 0 [ 2059.100484][T12247] usb 9-1: USB disconnect, device number 82 [ 2059.133217][ T9286] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2059.142885][ T9286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.151527][ T9286] usb 5-1: Product: syz [ 2059.155962][ T9286] usb 5-1: Manufacturer: syz [ 2059.161110][ T9286] usb 5-1: SerialNumber: syz [ 2059.215822][ T9286] usb 5-1: config 0 descriptor?? [ 2059.243304][ T9286] usb_ehset_test 5-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2059.318762][T12196] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 2059.458681][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2059.479213][T12196] usb 8-1: Using ep0 maxpacket: 8 [ 2059.518966][T12196] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2059.590306][T12196] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2059.600034][T12196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.608551][T12196] usb 8-1: Product: syz [ 2059.613084][T12196] usb 8-1: Manufacturer: syz [ 2059.617960][T12196] usb 8-1: SerialNumber: syz [ 2059.649716][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2059.669337][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2059.678059][ T10] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.695228][ T10] usb 3-1: config 179 has no interface number 0 [ 2059.697829][T12196] usb 8-1: config 0 descriptor?? [ 2059.704082][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2059.721100][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2059.730836][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.857153][T12196] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2059.861242][ T9286] usb 5-1: USB disconnect, device number 94 [ 2060.218544][ T10] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2060.410512][T12247] usb 3-1: USB disconnect, device number 75 [ 2060.438700][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 2060.529371][ T10] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2060.539252][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.547548][ T10] usb 9-1: Product: syz [ 2060.552153][ T10] usb 9-1: Manufacturer: syz [ 2060.557033][ T10] usb 9-1: SerialNumber: syz [ 2060.618171][ T10] usb 9-1: config 0 descriptor?? [ 2061.471245][T19860] loop2: detected capacity change from 0 to 1024 [ 2061.584300][T19860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2061.597600][T19860] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2061.685415][T19860] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2061.966450][T12196] gspca_zc3xx: reg_r err -32 [ 2062.002512][T14929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2062.029141][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2062.178849][ T10] usb 1-1: device descriptor read/64, error -71 [ 2062.418725][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2062.498832][ T9286] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2062.559167][T12196] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2062.566122][T12196] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2062.638757][ T10] usb 1-1: device descriptor read/64, error -71 [ 2062.704815][ T9286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.717626][ T9286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.728379][ T9286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2062.742008][ T9286] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2062.751595][ T9286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.774407][ T10] usb usb1-port1: attempt power cycle [ 2062.797050][ T9286] usb 3-1: config 0 descriptor?? [ 2063.120442][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2063.155428][ T10] usb 1-1: device descriptor read/8, error -71 [ 2063.312888][T12247] usb 9-1: USB disconnect, device number 83 [ 2063.411652][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2063.461445][ T9286] usbhid 3-1:0.0: can't add hid device: -71 [ 2063.470010][ T9286] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2063.502922][ T10] usb 1-1: device descriptor read/8, error -71 [ 2063.531022][ T9286] usb 3-1: USB disconnect, device number 76 [ 2063.538654][T12196] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2063.628784][T14110] usb 8-1: USB disconnect, device number 57 [ 2063.645097][ T10] usb usb1-port1: unable to enumerate USB device [ 2063.675831][T19882] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3614'. [ 2063.727705][T12196] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 2063.736491][T12196] usb 5-1: config 0 has no interface number 0 [ 2063.743093][T12196] usb 5-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2063.753277][T12196] usb 5-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2063.764670][T12196] usb 5-1: config 0 interface 7 has no altsetting 0 [ 2063.771784][T12196] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2063.781517][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.835913][T12196] usb 5-1: config 0 descriptor?? [ 2063.844582][T19880] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2064.072385][T12247] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2064.166764][T12196] usb 5-1: string descriptor 0 read error: -71 [ 2064.176043][T12196] usb 5-1: Error in usbnet_get_endpoints (-22) [ 2064.303364][T12196] usb 5-1: USB disconnect, device number 95 [ 2064.375806][T12247] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.387001][T12247] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2064.491896][T12247] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2064.505310][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2064.514506][T12247] usb 9-1: SerialNumber: syz [ 2064.747531][T12247] usb 9-1: 0:2 : does not exist [ 2064.752925][T12247] usb 9-1: unit 5: unexpected type 0x0d [ 2064.786022][T19881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2064.828898][ T9286] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2064.980204][T12247] usb 9-1: USB disconnect, device number 84 [ 2064.999129][ T9286] usb 3-1: Using ep0 maxpacket: 32 [ 2065.070474][ T9286] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 2065.079644][ T9286] usb 3-1: config 0 has no interface number 0 [ 2065.156409][ T9286] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2065.166486][ T9286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.175172][ T9286] usb 3-1: Product: syz [ 2065.179953][ T9286] usb 3-1: Manufacturer: syz [ 2065.184833][ T9286] usb 3-1: SerialNumber: syz [ 2065.196778][ T9286] usb 3-1: config 0 descriptor?? [ 2065.276007][ T9286] usb_ehset_test 3-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2065.508692][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2065.699298][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 2065.748731][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2065.757613][ T10] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2065.768453][ T10] usb 5-1: config 179 has no interface number 0 [ 2065.775011][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2065.789080][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2065.798554][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.813477][T19896] loop0: detected capacity change from 0 to 1024 [ 2065.895742][ T9286] usb 3-1: USB disconnect, device number 77 [ 2065.984638][T19896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2065.997823][T19896] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2066.117556][T19896] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2066.401642][T14835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2066.759912][ T9286] usb 5-1: USB disconnect, device number 96 [ 2067.288856][T12247] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2067.488672][T12247] usb 3-1: Using ep0 maxpacket: 8 [ 2067.516167][T12247] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2067.555370][T12247] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2067.564946][T12247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.576231][T12247] usb 3-1: Product: syz [ 2067.581735][T12247] usb 3-1: Manufacturer: syz [ 2067.586600][T12247] usb 3-1: SerialNumber: syz [ 2067.650550][T12247] usb 3-1: config 0 descriptor?? [ 2067.668736][T12196] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2067.690781][T12247] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2067.880404][T12196] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.893311][T12196] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.904053][T12196] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2067.917546][T12196] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2067.927203][T12196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.944908][T12196] usb 9-1: config 0 descriptor?? [ 2067.979301][ T9286] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2068.219555][ T9286] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 2068.228532][ T9286] usb 5-1: config 0 has no interface number 0 [ 2068.234934][ T9286] usb 5-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2068.245226][ T9286] usb 5-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2068.256490][ T9286] usb 5-1: config 0 interface 7 has no altsetting 0 [ 2068.263770][ T9286] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2068.273539][ T9286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.308464][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2068.338128][ T9286] usb 5-1: config 0 descriptor?? [ 2068.347870][T19918] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2068.470344][ T10] usb 1-1: device descriptor read/64, error -71 [ 2068.625234][ T9286] usb 5-1: string descriptor 0 read error: -71 [ 2068.627103][T12196] usbhid 9-1:0.0: can't add hid device: -71 [ 2068.633936][ T9286] usb 5-1: Error in usbnet_get_endpoints (-22) [ 2068.639619][T12196] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2068.682930][ T9286] usb 5-1: USB disconnect, device number 97 [ 2068.726869][T12196] usb 9-1: USB disconnect, device number 85 [ 2068.738610][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2068.897347][ T10] usb 1-1: device descriptor read/64, error -71 [ 2069.030214][ T10] usb usb1-port1: attempt power cycle [ 2069.299566][T19913] loop7: detected capacity change from 0 to 32768 [ 2069.409020][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2069.433430][T19913] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 2069.461328][ T10] usb 1-1: device descriptor read/8, error -71 [ 2069.549299][T19913] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 2069.709075][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2069.750743][T12247] gspca_zc3xx: reg_r err -32 [ 2069.751364][ T10] usb 1-1: device descriptor read/8, error -71 [ 2069.883593][ T10] usb usb1-port1: unable to enumerate USB device [ 2070.339975][T12247] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2070.346892][T12247] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2070.375314][T19930] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3631'. [ 2070.749638][T12247] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2070.961146][T12247] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.971870][T12247] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2071.056498][T12247] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2071.066109][T12247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2071.075687][T12247] usb 5-1: SerialNumber: syz [ 2071.250222][ T10] usb 3-1: USB disconnect, device number 78 [ 2071.349334][T12247] usb 5-1: 0:2 : does not exist [ 2071.354622][T12247] usb 5-1: unit 5: unexpected type 0x0d [ 2071.387621][T19929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2071.480613][T12247] usb 5-1: USB disconnect, device number 98 [ 2071.519084][T15209] ocfs2: Unmounting device (7,7) on (node local) [ 2071.604068][T19934] loop0: detected capacity change from 0 to 1024 [ 2071.671463][T19934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2071.686380][T19934] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2071.791472][T19936] usb usb8: usbfs: process 19936 (syz.2.3634) did not claim interface 0 before use [ 2071.969286][ T29] audit: type=1326 audit(1741286821.865:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19935 comm="syz.2.3634" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06579 code=0x0 [ 2072.614502][T19939] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2072.702204][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.709212][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2073.261150][ T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2073.469148][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 2073.542801][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2073.551812][ T10] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.562574][ T10] usb 5-1: config 179 has no interface number 0 [ 2073.569786][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2073.583750][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2073.593325][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.639199][T12247] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 2073.789418][T14835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2073.877681][T12247] usb 8-1: Using ep0 maxpacket: 32 [ 2073.917755][T12247] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 2073.929084][T12247] usb 8-1: config 0 has no interface number 0 [ 2073.956440][T12247] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2073.966608][T12247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.975010][T12247] usb 8-1: Product: syz [ 2073.979459][T12247] usb 8-1: Manufacturer: syz [ 2073.984211][T12247] usb 8-1: SerialNumber: syz [ 2074.079280][T12196] usb 5-1: USB disconnect, device number 99 [ 2074.133011][ T10] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2074.137788][T12247] usb 8-1: config 0 descriptor?? [ 2074.165148][T12247] usb_ehset_test 8-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2074.411540][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.423181][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.439668][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2074.455482][ T10] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2074.466151][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.559125][ T9286] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2074.780863][ T10] usb 9-1: config 0 descriptor?? [ 2074.781909][T12196] usb 8-1: USB disconnect, device number 58 [ 2074.815794][ T9286] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 2074.824464][ T9286] usb 1-1: config 0 has no interface number 0 [ 2074.831171][ T9286] usb 1-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2074.847543][ T9286] usb 1-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2074.861323][ T9286] usb 1-1: config 0 interface 7 has no altsetting 0 [ 2074.868457][ T9286] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2074.877917][ T9286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.042167][ T9286] usb 1-1: config 0 descriptor?? [ 2075.059736][T19957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2075.311295][ T9286] usb 1-1: string descriptor 0 read error: -71 [ 2075.321382][ T9286] usb 1-1: Error in usbnet_get_endpoints (-22) [ 2075.344785][ T9286] usb 1-1: USB disconnect, device number 89 [ 2075.436589][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 2075.443598][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2075.491740][ T10] usb 9-1: USB disconnect, device number 86 [ 2075.694766][T19962] loop4: detected capacity change from 0 to 4096 [ 2075.786754][T19964] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2075.844420][ T29] audit: type=1800 audit(1741286825.745:81): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3642" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 2076.388843][T12196] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2076.578723][T12196] usb 3-1: Using ep0 maxpacket: 8 [ 2076.596607][T12196] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2076.617994][T12196] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2076.627612][T12196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.636344][T12196] usb 3-1: Product: syz [ 2076.640901][T12196] usb 3-1: Manufacturer: syz [ 2076.645782][T12196] usb 3-1: SerialNumber: syz [ 2076.655352][T12196] usb 3-1: config 0 descriptor?? [ 2076.674148][T12196] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2076.814126][T19975] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3647'. [ 2077.002004][ T10] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2077.159103][ T10] usb 5-1: device descriptor read/64, error -71 [ 2077.239356][T12247] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2077.399221][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2077.433735][T12247] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.445120][T12247] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2077.497376][T12247] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2077.511025][T12247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2077.520781][T12247] usb 9-1: SerialNumber: syz [ 2077.617156][ T10] usb 5-1: device descriptor read/64, error -71 [ 2077.732997][ T10] usb usb5-port1: attempt power cycle [ 2077.780261][T19974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2077.830769][T12247] usb 9-1: 0:2 : does not exist [ 2077.836013][T12247] usb 9-1: unit 5: unexpected type 0x0d [ 2077.883952][T12247] usb 9-1: USB disconnect, device number 87 [ 2077.968752][T19984] loop7: detected capacity change from 0 to 1024 [ 2078.062361][T19984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2078.077382][T19984] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2078.116031][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2078.155434][ T10] usb 5-1: device descriptor read/8, error -71 [ 2078.203839][T19989] usb usb8: usbfs: process 19989 (syz.0.3651) did not claim interface 0 before use [ 2078.356143][ T29] audit: type=1326 audit(1741286828.255:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19987 comm="syz.0.3651" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5579 code=0x0 [ 2078.446226][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2078.485256][ T10] usb 5-1: device descriptor read/8, error -71 [ 2078.600497][ T10] usb usb5-port1: unable to enumerate USB device [ 2078.820930][T12196] gspca_zc3xx: reg_r err -32 [ 2079.418576][T12196] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2079.425392][T12196] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2080.015228][ T10] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2080.112182][T15209] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2080.260266][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 2080.305363][ T10] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2080.314849][ T10] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.328453][ T10] usb 9-1: config 179 has no interface number 0 [ 2080.334983][ T10] usb 9-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2080.349239][ T10] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2080.358782][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.673143][ T9286] usb 3-1: USB disconnect, device number 79 [ 2080.968586][ T10] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 2081.216058][T12196] usb 9-1: USB disconnect, device number 88 [ 2081.219016][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 2081.250877][ T10] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 2081.260053][ T10] usb 8-1: config 0 has no interface number 0 [ 2081.262640][T20003] loop2: detected capacity change from 0 to 2048 [ 2081.316285][ T10] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2081.326429][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.336526][ T10] usb 8-1: Product: syz [ 2081.342220][ T10] usb 8-1: Manufacturer: syz [ 2081.347113][ T10] usb 8-1: SerialNumber: syz [ 2081.362517][T20003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2081.375827][T20003] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2081.406264][ T10] usb 8-1: config 0 descriptor?? [ 2081.446372][ T10] usb_ehset_test 8-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2081.825061][T14929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2081.983377][ T10] usb 8-1: USB disconnect, device number 59 [ 2082.144876][T12196] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2082.293886][T12247] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2082.362075][T12196] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 2082.372231][T12196] usb 5-1: config 0 has no interface number 0 [ 2082.380052][T12196] usb 5-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2082.391224][T12196] usb 5-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2082.403346][T12196] usb 5-1: config 0 interface 7 has no altsetting 0 [ 2082.410504][T12196] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2082.422317][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.550172][T12247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.562022][T12247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.572358][T12247] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2082.586284][T12247] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2082.595820][T12247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.789019][T12196] usb 5-1: config 0 descriptor?? [ 2082.798165][T20008] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2083.009598][T12247] usb 1-1: config 0 descriptor?? [ 2083.144716][T12196] usb 5-1: string descriptor 0 read error: -71 [ 2083.154929][T12196] usb 5-1: Error in usbnet_get_endpoints (-22) [ 2083.203879][T12196] usb 5-1: USB disconnect, device number 104 [ 2083.667299][T20022] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3662'. [ 2083.675655][T12247] usbhid 1-1:0.0: can't add hid device: -71 [ 2083.683459][T12247] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2083.716233][T12247] usb 1-1: USB disconnect, device number 90 [ 2083.886953][T20026] loop8: detected capacity change from 0 to 1024 [ 2084.000263][T20026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2084.013383][T20026] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2084.098672][T12196] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2084.133873][T20031] loop4: detected capacity change from 0 to 1024 [ 2084.145490][T20031] EXT4-fs: Ignoring removed orlov option [ 2084.189459][T20031] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2084.217930][T20031] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2084.289504][T12196] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.300299][T12196] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2084.306035][T20031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2084.372861][T12196] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2084.382803][T12196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2084.394565][T12196] usb 3-1: SerialNumber: syz [ 2084.599079][T12247] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 2084.734085][T20021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.770652][T12196] usb 3-1: 0:2 : does not exist [ 2084.779590][T12196] usb 3-1: unit 5: unexpected type 0x0d [ 2084.795819][T14396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2084.808552][T12247] usb 8-1: Using ep0 maxpacket: 8 [ 2084.833876][T12247] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2084.865310][T12247] usb 8-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2084.874909][T12247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.886192][T12247] usb 8-1: Product: syz [ 2084.891752][T12247] usb 8-1: Manufacturer: syz [ 2084.896638][T12247] usb 8-1: SerialNumber: syz [ 2084.947488][T12196] usb 3-1: USB disconnect, device number 80 [ 2084.996675][T12247] usb 8-1: config 0 descriptor?? [ 2085.034051][T12247] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2085.498103][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2085.655004][ T29] audit: type=1326 audit(1741286835.555:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20038 comm="syz.4.3667" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2086.099633][T12196] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2086.340463][T12196] usb 3-1: Using ep0 maxpacket: 8 [ 2086.444281][T12196] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2086.453422][T12196] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.464164][T12196] usb 3-1: config 179 has no interface number 0 [ 2086.470738][T12196] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2086.485062][T12196] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2086.494522][T12196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.536643][T20050] loop8: detected capacity change from 0 to 1024 [ 2086.551354][T20050] EXT4-fs: Ignoring removed orlov option [ 2086.569294][T20050] EXT4-fs (loop8): Test dummy encryption mode enabled [ 2086.589470][T20050] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2086.675173][T20050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2087.145403][T12247] gspca_zc3xx: reg_r err -32 [ 2087.316055][T14900] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2087.485885][ T10] usb 3-1: USB disconnect, device number 81 [ 2087.740522][T12247] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2087.751166][T12247] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2088.008841][T12196] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2088.189182][T12196] usb 9-1: Using ep0 maxpacket: 32 [ 2088.220904][T12196] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 2088.229585][T12196] usb 9-1: config 0 has no interface number 0 [ 2088.264309][T12196] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2088.273855][T12196] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.282480][T12196] usb 9-1: Product: syz [ 2088.286842][T12196] usb 9-1: Manufacturer: syz [ 2088.291710][T12196] usb 9-1: SerialNumber: syz [ 2088.304676][T12196] usb 9-1: config 0 descriptor?? [ 2088.335491][T12196] usb_ehset_test 9-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2088.857262][ T10] usb 8-1: USB disconnect, device number 60 [ 2089.040458][ T9286] usb 9-1: USB disconnect, device number 89 [ 2089.265296][T12196] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2089.478765][T12247] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 2089.526334][T12196] usb 3-1: config 0 has an invalid interface number: 7 but max is 0 [ 2089.534894][T12196] usb 3-1: config 0 has no interface number 0 [ 2089.541490][T12196] usb 3-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2089.551894][T12196] usb 3-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2089.563180][T12196] usb 3-1: config 0 interface 7 has no altsetting 0 [ 2089.570320][T12196] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2089.579906][T12196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.610195][T12196] usb 3-1: config 0 descriptor?? [ 2089.618839][T20067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2089.696934][T12247] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.708749][T12247] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.719522][T12247] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2089.733268][T12247] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2089.742967][T12247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.880142][T12196] usb 3-1: string descriptor 0 read error: -71 [ 2089.888982][T12196] usb 3-1: Error in usbnet_get_endpoints (-22) [ 2089.935945][T12247] usb 8-1: config 0 descriptor?? [ 2089.973686][T12196] usb 3-1: USB disconnect, device number 82 [ 2090.249349][T20079] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3679'. [ 2090.595303][T12247] usbhid 8-1:0.0: can't add hid device: -71 [ 2090.605993][T12247] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2090.640998][T12247] usb 8-1: USB disconnect, device number 61 [ 2090.653065][T12196] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2090.827116][T12196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2090.838178][T12196] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2090.855347][T20084] loop2: detected capacity change from 0 to 1024 [ 2090.874791][T12196] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2090.884714][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2090.893561][T12196] usb 5-1: SerialNumber: syz [ 2090.894193][T20084] EXT4-fs: Ignoring removed orlov option [ 2090.930215][T20084] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2090.944081][T20084] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2091.001589][T20084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2091.167140][T12196] usb 5-1: 0:2 : does not exist [ 2091.173125][T12196] usb 5-1: unit 5: unexpected type 0x0d [ 2091.211503][T12196] usb 5-1: USB disconnect, device number 105 [ 2091.221943][T20078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2091.660649][T14929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2092.239872][T20093] usb usb8: usbfs: process 20093 (syz.8.3685) did not claim interface 0 before use [ 2092.349000][ T10] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2092.409516][ T29] audit: type=1326 audit(1741286842.315:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20092 comm="syz.8.3685" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 2092.532600][T20076] loop0: detected capacity change from 0 to 32768 [ 2092.563428][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 2092.579214][T12196] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2092.615417][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2092.624583][ T10] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.635483][ T10] usb 3-1: config 179 has no interface number 0 [ 2092.642182][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2092.656362][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2092.671925][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.723089][T20076] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2092.733316][T20076] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 2092.735244][T20076] XFS (loop0): log mount failed [ 2092.768693][T12196] usb 5-1: Using ep0 maxpacket: 8 [ 2092.783428][T12196] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2092.809489][T12196] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2092.820036][T12196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.829636][T12196] usb 5-1: Product: syz [ 2092.834072][T12196] usb 5-1: Manufacturer: syz [ 2092.839757][T12196] usb 5-1: SerialNumber: syz [ 2092.993313][T12196] usb 5-1: config 0 descriptor?? [ 2093.016673][T12196] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2094.651530][T12247] usb 3-1: USB disconnect, device number 83 [ 2095.294877][T12196] gspca_zc3xx: reg_r err -32 [ 2095.890496][T12196] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2095.897400][T12196] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2096.098749][T14110] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 2096.109701][ T10] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2096.219238][ T9286] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2096.259074][T14110] usb 8-1: Using ep0 maxpacket: 32 [ 2096.278994][T14110] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 2096.287507][T14110] usb 8-1: config 0 has no interface number 0 [ 2096.297852][ T10] usb 9-1: config 0 has an invalid interface number: 7 but max is 0 [ 2096.307184][ T10] usb 9-1: config 0 has no interface number 0 [ 2096.313781][ T10] usb 9-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2096.324071][ T10] usb 9-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2096.335565][ T10] usb 9-1: config 0 interface 7 has no altsetting 0 [ 2096.342707][ T10] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2096.358764][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.435865][ T10] usb 9-1: config 0 descriptor?? [ 2096.466009][T20117] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2096.635728][ T9286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.647595][ T9286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.664156][ T9286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2096.680167][ T9286] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2096.690061][ T9286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.761166][T14110] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2096.770825][T14110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.779357][T14110] usb 8-1: Product: syz [ 2096.783798][T14110] usb 8-1: Manufacturer: syz [ 2096.789025][T14110] usb 8-1: SerialNumber: syz [ 2096.798693][T14110] usb 8-1: config 0 descriptor?? [ 2096.827863][T14110] usb_ehset_test 8-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2096.906484][ T9286] usb 3-1: config 0 descriptor?? [ 2096.906821][T14110] usb 5-1: USB disconnect, device number 106 [ 2097.505757][T14110] usb 8-1: USB disconnect, device number 62 [ 2097.619414][T20129] loop0: detected capacity change from 0 to 1024 [ 2097.620248][ T9286] usbhid 3-1:0.0: can't add hid device: -71 [ 2097.634394][ T9286] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2097.636637][T20129] EXT4-fs: Ignoring removed orlov option [ 2097.654723][T20129] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2097.700791][ T9286] usb 3-1: USB disconnect, device number 84 [ 2097.716428][T20129] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2097.771982][T20129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2097.831356][ T10] usb 9-1: string descriptor 0 read error: -71 [ 2097.840564][ T10] usb 9-1: Error in usbnet_get_endpoints (-22) [ 2097.865793][ T10] usb 9-1: USB disconnect, device number 90 [ 2097.976568][T14835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2098.629484][T20138] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3696'. [ 2098.828527][T20142] loop4: detected capacity change from 0 to 2048 [ 2098.862680][T20142] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2098.910720][T20142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2098.958697][T14110] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2099.133058][T14110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.144885][T14110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2099.174885][T14110] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2099.185696][T14110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2099.194217][T14110] usb 3-1: SerialNumber: syz [ 2099.533391][T20137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2099.536428][T14110] usb 3-1: 0:2 : does not exist [ 2099.549206][T14110] usb 3-1: unit 5: unexpected type 0x0d [ 2099.591234][T14110] usb 3-1: USB disconnect, device number 85 [ 2099.645804][T20153] usb usb8: usbfs: process 20153 (syz.4.3701) did not claim interface 0 before use [ 2099.698543][T12196] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2099.756586][ T29] audit: type=1326 audit(1741286849.655:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20151 comm="syz.4.3701" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 2099.779580][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2099.888538][T12196] usb 9-1: Using ep0 maxpacket: 8 [ 2099.901361][T12196] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2099.910037][T12196] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.921017][T12196] usb 9-1: config 179 has no interface number 0 [ 2099.936031][T12196] usb 9-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 2099.950759][T12196] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2099.960311][T12196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.992777][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 2100.020571][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2100.093969][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2100.103823][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.112158][ T10] usb 1-1: Product: syz [ 2100.116496][ T10] usb 1-1: Manufacturer: syz [ 2100.121818][ T10] usb 1-1: SerialNumber: syz [ 2100.255436][ T10] usb 1-1: config 0 descriptor?? [ 2100.270813][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2100.727265][T12196] usb 9-1: USB disconnect, device number 91 [ 2101.323208][T20162] loop2: detected capacity change from 0 to 1024 [ 2101.352248][T20162] EXT4-fs: Ignoring removed orlov option [ 2101.409924][T20162] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2101.436459][T20162] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2101.688748][T20162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2101.928751][T12196] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 2102.141146][T12196] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.152780][T12196] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2102.163086][T12196] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2102.176519][T12196] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2102.188663][T12196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.199903][T14110] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2102.219578][T12196] usb 8-1: config 0 descriptor?? [ 2102.347215][ T10] gspca_zc3xx: reg_r err -32 [ 2102.358789][T14110] usb 9-1: Using ep0 maxpacket: 32 [ 2102.413588][T14110] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 2102.422406][T14110] usb 9-1: config 0 has no interface number 0 [ 2102.531882][T14110] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2102.541972][T14110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.546755][T14929] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2102.550422][T14110] usb 9-1: Product: syz [ 2102.550604][T14110] usb 9-1: Manufacturer: syz [ 2102.550789][T14110] usb 9-1: SerialNumber: syz [ 2102.591389][T14110] usb 9-1: config 0 descriptor?? [ 2102.639558][T14110] usb_ehset_test 9-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2102.872933][T12196] usbhid 8-1:0.0: can't add hid device: -71 [ 2102.879986][T12196] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2102.903754][T12196] usb 8-1: USB disconnect, device number 63 [ 2102.999194][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2103.013857][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2103.127455][T14110] usb 9-1: USB disconnect, device number 92 [ 2103.678715][T12196] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2103.891165][T12196] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 2103.899967][T12196] usb 5-1: config 0 has no interface number 0 [ 2103.906344][T12196] usb 5-1: config 0 interface 7 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 2103.916645][T12196] usb 5-1: config 0 interface 7 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2103.930381][T12196] usb 5-1: config 0 interface 7 has no altsetting 0 [ 2103.937345][T12196] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice= c.63 [ 2103.948330][T12196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.076560][ T10] usb 1-1: USB disconnect, device number 91 [ 2104.136126][T12196] usb 5-1: config 0 descriptor?? [ 2104.144896][T20176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2104.251967][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3711'. [ 2104.431930][T20185] netlink: 'syz.7.3711': attribute type 10 has an invalid length. [ 2104.446190][T12196] usb 5-1: string descriptor 0 read error: -71 [ 2104.448730][T12196] usb 5-1: Error in usbnet_get_endpoints (-22) [ 2104.503683][T12196] usb 5-1: USB disconnect, device number 107 [ 2105.149412][T12196] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2105.288635][T14110] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2105.328736][T12196] usb 3-1: device descriptor read/64, error -71 [ 2105.488011][T14110] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.499755][T14110] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2105.509317][T14110] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.524559][T14110] usb 8-1: config 0 descriptor?? [ 2106.089276][T12196] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2106.127553][T14110] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 2106.163944][T14110] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0028/input/input81 [ 2106.199905][T12247] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2106.248840][T12196] usb 3-1: device descriptor read/64, error -71 [ 2106.306932][T14110] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 2106.391645][T12247] usb 5-1: device descriptor read/64, error -71 [ 2106.400528][T12196] usb usb3-port1: attempt power cycle [ 2106.605441][ T10] usb 8-1: USB disconnect, device number 64 [ 2106.648829][T12247] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2106.750989][T12196] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2106.784599][T12196] usb 3-1: device descriptor read/8, error -71 [ 2106.809871][T12247] usb 5-1: device descriptor read/64, error -71 [ 2106.855525][T20206] loop8: detected capacity change from 0 to 1024 [ 2106.930098][T12247] usb usb5-port1: attempt power cycle [ 2107.044683][T12196] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2107.084416][T12196] usb 3-1: device descriptor read/8, error -71 [ 2107.210582][T12196] usb usb3-port1: unable to enumerate USB device [ 2107.288953][T12247] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2107.345385][T12247] usb 5-1: device descriptor read/8, error -71 [ 2107.600012][T12247] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2107.703061][T12247] usb 5-1: device descriptor read/8, error -71 [ 2107.719992][ T10] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2107.823783][T12247] usb usb5-port1: unable to enumerate USB device [ 2107.910042][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2107.926619][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2107.940131][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2107.950410][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2107.961093][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2107.970584][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.992159][T20216] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3726'. [ 2108.014998][ T10] usb 9-1: config 0 descriptor?? [ 2108.238590][T12247] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2108.261070][ T10] hdpvr 9-1:0.0: unexpected answer of status request, len 0 [ 2108.269162][ T10] hdpvr 9-1:0.0: device init failed [ 2108.274857][ T10] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 2108.330315][T14110] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2108.432549][T12247] usb 1-1: Using ep0 maxpacket: 16 [ 2108.477003][T12247] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2108.486849][T12247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.495545][T12247] usb 1-1: Product: syz [ 2108.500148][T12247] usb 1-1: Manufacturer: syz [ 2108.505012][T12247] usb 1-1: SerialNumber: syz [ 2108.528172][T12247] r8152-cfgselector 1-1: Unknown version 0x0000 [ 2108.539805][T12247] r8152-cfgselector 1-1: config 0 descriptor?? [ 2108.563134][T14110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.573856][T14110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2108.605510][T14110] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2108.615358][T14110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2108.624024][T14110] usb 3-1: SerialNumber: syz [ 2108.870744][T20214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2108.893338][T14110] usb 3-1: 0:2 : does not exist [ 2108.898675][T14110] usb 3-1: unit 5: unexpected type 0x0d [ 2108.934762][T14110] usb 3-1: USB disconnect, device number 90 [ 2109.312590][T20213] loop7: detected capacity change from 0 to 32768 [ 2109.319660][T12196] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2109.498802][T20213] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 2109.514029][T20213] bcachefs (loop7): initializing new filesystem [ 2109.523369][T12196] usb 5-1: Using ep0 maxpacket: 32 [ 2109.538949][T12196] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 2109.547450][T12196] usb 5-1: config 0 has no interface number 0 [ 2109.570813][T12196] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df [ 2109.571297][T20213] bcachefs (loop7): going read-write [ 2109.580261][T12196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.580406][T12196] usb 5-1: Product: syz [ 2109.580517][T12196] usb 5-1: Manufacturer: syz [ 2109.603417][T12196] usb 5-1: SerialNumber: syz [ 2109.618517][T12196] usb 5-1: config 0 descriptor?? [ 2109.627326][T20213] bcachefs (loop7): marking superblocks [ 2109.662152][T12196] usb_ehset_test 5-1:0.136: probe with driver usb_ehset_test failed with error -32 [ 2109.719019][T17146] ===================================================== [ 2109.726298][T17146] BUG: KMSAN: uninit-value in bch2_alloc_v4_validate+0x73f/0x1c10 [ 2109.735096][T17146] bch2_alloc_v4_validate+0x73f/0x1c10 [ 2109.740930][T17146] bch2_bkey_val_validate+0x357/0x530 [ 2109.746545][T17146] validate_bset_keys+0x2048/0x22b0 [ 2109.752203][T17146] validate_bset_for_write+0x2b3/0x410 [ 2109.757923][T17146] __bch2_btree_node_write+0x5436/0x6870 [ 2109.766804][T17146] bch2_btree_node_write_trans+0xd7/0x890 [ 2109.774017][T17146] btree_interior_update_work+0x3eac/0x4830 [ 2109.781528][T17146] process_scheduled_works+0xc1a/0x1e80 [ 2109.787381][T17146] worker_thread+0xea7/0x14f0 [ 2109.792491][T17146] kthread+0x6b9/0xef0 [ 2109.796892][T17146] ret_from_fork+0x6d/0x90 [ 2109.801754][T17146] ret_from_fork_asm+0x1a/0x30 [ 2109.806774][T17146] [ 2109.809610][T17146] Uninit was stored to memory at: [ 2109.815681][T17146] bch2_alloc_v4_validate+0x215/0x1c10 [ 2109.822099][T17146] bch2_bkey_val_validate+0x357/0x530 [ 2109.827721][T17146] validate_bset_keys+0x2048/0x22b0 [ 2109.834969][T17146] validate_bset_for_write+0x2b3/0x410 [ 2109.841548][T17146] __bch2_btree_node_write+0x5436/0x6870 [ 2109.847441][T17146] bch2_btree_node_write_trans+0xd7/0x890 [ 2109.853657][T17146] btree_interior_update_work+0x3eac/0x4830 [ 2109.860099][T17146] process_scheduled_works+0xc1a/0x1e80 [ 2109.868766][T17146] worker_thread+0xea7/0x14f0 [ 2109.873675][T17146] kthread+0x6b9/0xef0 [ 2109.878011][T17146] ret_from_fork+0x6d/0x90 [ 2109.884578][T17146] ret_from_fork_asm+0x1a/0x30 [ 2109.889765][T17146] [ 2109.892269][T17146] Uninit was stored to memory at: [ 2109.897602][T17146] bch2_sort_keys_keep_unwritten_whiteouts+0x14ab/0x1840 [ 2109.905132][T17146] __bch2_btree_node_write+0x3b3f/0x6870 [ 2109.911258][T17146] bch2_btree_node_write_trans+0xd7/0x890 [ 2109.917236][T17146] btree_interior_update_work+0x3eac/0x4830 [ 2109.923732][T17146] process_scheduled_works+0xc1a/0x1e80 [ 2109.929658][T17146] worker_thread+0xea7/0x14f0 [ 2109.934633][T17146] kthread+0x6b9/0xef0 [ 2109.939129][T17146] ret_from_fork+0x6d/0x90 [ 2109.943866][T17146] ret_from_fork_asm+0x1a/0x30 [ 2109.949084][T17146] [ 2109.951640][T17146] Uninit was created at: [ 2109.956306][T17146] ___kmalloc_large_node+0x22c/0x370 [ 2109.962324][T17146] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 2109.971202][T17146] __kmalloc_node_noprof+0xc96/0x1250 [ 2109.976838][T17146] __kvmalloc_node_noprof+0xc0/0x2d0 [ 2109.983686][T17146] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 2109.989947][T17146] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 2109.995803][T17146] bch2_fs_open+0x4d84/0x5ba0 [ 2110.000998][T17146] bch2_fs_get_tree+0x98a/0x24e0 [ 2110.006213][T17146] vfs_get_tree+0xb1/0x5a0 [ 2110.011156][T17146] do_new_mount+0x71f/0x15e0 [ 2110.016002][T17146] path_mount+0x742/0x1f10 [ 2110.020911][T17146] __se_sys_mount+0x71f/0x800 [ 2110.025840][T17146] __ia32_sys_mount+0xe3/0x150 [ 2110.031157][T17146] ia32_sys_call+0x260e/0x4180 [ 2110.036182][T17146] __do_fast_syscall_32+0xb0/0x110 [ 2110.041666][T17146] do_fast_syscall_32+0x38/0x80 [ 2110.046792][T17146] do_SYSENTER_32+0x1f/0x30 [ 2110.051708][T17146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2110.058437][T17146] [ 2110.060921][T17146] CPU: 1 UID: 0 PID: 17146 Comm: kworker/u8:28 Not tainted 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 2110.075032][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2110.086541][T17146] Workqueue: btree_update btree_interior_update_work [ 2110.093881][T17146] ===================================================== [ 2110.101125][T17146] Disabling lock debugging due to kernel taint [ 2110.107444][T17146] Kernel panic - not syncing: kmsan.panic set ... [ 2110.114021][T17146] CPU: 1 UID: 0 PID: 17146 Comm: kworker/u8:28 Tainted: G B 6.14.0-rc5-syzkaller-00039-g848e07631744 #0 [ 2110.126743][T17146] Tainted: [B]=BAD_PAGE [ 2110.131034][T17146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2110.141291][T17146] Workqueue: btree_update btree_interior_update_work [ 2110.148240][T17146] Call Trace: [ 2110.151661][T17146] [ 2110.154731][T17146] dump_stack_lvl+0x216/0x2d0 [ 2110.159614][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.165708][T17146] dump_stack+0x1e/0x24 [ 2110.170048][T17146] panic+0x4e2/0xcf0 [ 2110.174214][T17146] ? kmsan_get_metadata+0x61/0x1c0 [ 2110.179605][T17146] kmsan_report+0x2c7/0x2d0 [ 2110.184539][T17146] ? __msan_memcpy+0x108/0x1c0 [ 2110.189513][T17146] ? btree_interior_update_work+0x3eac/0x4830 [ 2110.195956][T17146] ? ret_from_fork+0x6d/0x90 [ 2110.201287][T17146] ? ret_from_fork_asm+0x1a/0x30 [ 2110.206548][T17146] ? __msan_warning+0x95/0x120 [ 2110.211627][T17146] ? bch2_alloc_v4_validate+0x73f/0x1c10 [ 2110.217459][T17146] ? bch2_bkey_val_validate+0x357/0x530 [ 2110.223294][T17146] ? validate_bset_keys+0x2048/0x22b0 [ 2110.228902][T17146] ? validate_bset_for_write+0x2b3/0x410 [ 2110.235177][T17146] ? __bch2_btree_node_write+0x5436/0x6870 [ 2110.241189][T17146] ? bch2_btree_node_write_trans+0xd7/0x890 [ 2110.247314][T17146] ? btree_interior_update_work+0x3eac/0x4830 [ 2110.253644][T17146] ? process_scheduled_works+0xc1a/0x1e80 [ 2110.259618][T17146] ? worker_thread+0xea7/0x14f0 [ 2110.264738][T17146] ? kthread+0x6b9/0xef0 [ 2110.269183][T17146] ? ret_from_fork+0x6d/0x90 [ 2110.273988][T17146] ? ret_from_fork_asm+0x1a/0x30 [ 2110.279150][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.285554][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.290984][T17146] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2110.297535][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.302963][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.309011][T17146] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2110.315078][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.320497][T17146] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 2110.327068][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.332487][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.338535][T17146] __msan_warning+0x95/0x120 [ 2110.343335][T17146] bch2_alloc_v4_validate+0x73f/0x1c10 [ 2110.349083][T17146] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2110.355722][T17146] ? kmsan_get_shadow_origin_ptr+0x21/0xb0 [ 2110.361772][T17146] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 2110.367874][T17146] bch2_bkey_val_validate+0x357/0x530 [ 2110.373604][T17146] validate_bset_keys+0x2048/0x22b0 [ 2110.379106][T17146] validate_bset_for_write+0x2b3/0x410 [ 2110.384835][T17146] __bch2_btree_node_write+0x5436/0x6870 [ 2110.390705][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.396143][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.402183][T17146] ? kmsan_get_metadata+0x13e/0x1c0 [ 2110.407603][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.413705][T17146] bch2_btree_node_write_trans+0xd7/0x890 [ 2110.419659][T17146] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2110.425706][T17146] btree_interior_update_work+0x3eac/0x4830 [ 2110.431892][T17146] ? btree_interior_update_work+0x3c6f/0x4830 [ 2110.438224][T17146] ? __pfx_btree_interior_update_work+0x10/0x10 [ 2110.444709][T17146] process_scheduled_works+0xc1a/0x1e80 [ 2110.450539][T17146] worker_thread+0xea7/0x14f0 [ 2110.455429][T17146] kthread+0x6b9/0xef0 [ 2110.459711][T17146] ? __pfx_worker_thread+0x10/0x10 [ 2110.465020][T17146] ? __pfx_kthread+0x10/0x10 [ 2110.469807][T17146] ret_from_fork+0x6d/0x90 [ 2110.474425][T17146] ? __pfx_kthread+0x10/0x10 [ 2110.479221][T17146] ret_from_fork_asm+0x1a/0x30 [ 2110.484217][T17146] [ 2110.487679][T17146] Kernel Offset: disabled [ 2110.492119][T17146] Rebooting in 86400 seconds..