last executing test programs: 30m39.707765241s ago: executing program 32 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r4, 0x5404, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r5 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_io_uring_setup(0x1d8d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) 30m38.734292618s ago: executing program 33 (id=10): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 30m36.006251975s ago: executing program 34 (id=12): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x21c2a, 0x10100, 0x0, 0x1fc, 0x0, r0}, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbb}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 29m21.004534059s ago: executing program 35 (id=70): syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmsg$IPSET_CMD_TEST(r6, 0x0, 0x80) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f00003df000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000306010200000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_io_uring_submit(r0, 0x0, 0x0) 28m56.820927674s ago: executing program 36 (id=121): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x4ff, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r6, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 28m37.115965203s ago: executing program 37 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x40080) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1000000, 0x0, 0xfa000, 0x1a5e02}) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 27m48.78623236s ago: executing program 38 (id=236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="980000000000000000000000ffffffff1815e6c69b63e35600000800000080000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x90) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0x5}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x321803, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vcsa(0xffffffffffffff9c, 0x0, 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) 27m21.589957351s ago: executing program 39 (id=269): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) cachestat(r2, &(0x7f0000002080)={0x6, 0xb}, &(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x4}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r3 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) 24m46.778171266s ago: executing program 40 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xfff2}, {0x6, 0x8}, {0xffe0, 0xb}}}, 0x24}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001440)={0xd4, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x224df4f2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0xd4}}, 0x40001) 17m44.969585912s ago: executing program 41 (id=2384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 17m43.244218101s ago: executing program 42 (id=2360): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 15m57.776657836s ago: executing program 43 (id=2635): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 14m39.88790636s ago: executing program 44 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) 13m28.523661886s ago: executing program 45 (id=2950): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0) 12m16.520879963s ago: executing program 46 (id=3107): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0802006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) sendto$inet(r3, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) migrate_pages(0x0, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) 11m59.942257203s ago: executing program 47 (id=3136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 11m19.538266127s ago: executing program 48 (id=3206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x555) semtimedop(r2, &(0x7f00000002c0)=[{0x2, 0x97a, 0x1000}], 0x1, 0x0) 8m35.941444467s ago: executing program 49 (id=3592): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000000000001085"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r3, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) 6m20.207997017s ago: executing program 3 (id=3984): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x28, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x20000004) 6m19.808332158s ago: executing program 3 (id=3986): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb48, 0x2000000000010009, 0x8, 0x0, 0x9}, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) getpid() connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 6m19.171375707s ago: executing program 1 (id=3988): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100080200000018000066000000080003", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x68, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x4, {}, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x5, 0x0, {0x5, 0x5, 0x0, 0x5, 0x0, 0x1}, 0x1, 0xd, 0x81}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m18.603277382s ago: executing program 7 (id=3990): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) 6m18.41941667s ago: executing program 1 (id=3991): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r1, 0xff7f0000, 0x10, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 6m18.064972853s ago: executing program 1 (id=3992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) 6m17.222266897s ago: executing program 1 (id=3994): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x6, r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}], 0x2) 6m16.746367763s ago: executing program 1 (id=3996): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r5, r3, 0x0, 0x8010002b) 6m13.02672367s ago: executing program 4 (id=4000): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6m12.336156231s ago: executing program 4 (id=4002): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r1, 0xff7f0000, 0x10, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 6m11.887521436s ago: executing program 4 (id=4004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) 6m11.311041675s ago: executing program 4 (id=4006): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x24, &(0x7f00000008c0)={0x20, 0x0, 0x2, "73e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m11.115761576s ago: executing program 3 (id=4007): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6m10.306614293s ago: executing program 3 (id=4009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6m9.060435423s ago: executing program 3 (id=4010): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 6m8.578455598s ago: executing program 3 (id=4012): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 6m8.545526858s ago: executing program 7 (id=4013): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x10042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 6m8.235504581s ago: executing program 9 (id=4014): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r1, 0xff7f0000, 0x10, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 6m7.820980514s ago: executing program 7 (id=4015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)='E'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 6m7.353894292s ago: executing program 9 (id=4016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10) 6m6.935637494s ago: executing program 4 (id=4017): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) pipe(&(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 6m6.811155625s ago: executing program 9 (id=4018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 6m6.500898663s ago: executing program 7 (id=4019): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x4c, 0xa, 0x3, "2e9b1c2300000000207563330000e70000a2000000000000000000001000", 0x31435750}) 6m6.203851259s ago: executing program 9 (id=4020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6m5.497104602s ago: executing program 7 (id=4021): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{&(0x7f0000000880)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790b8f33ed64746f783dcbca965f77a4ebc4ee05aaa5e68d551b3cb668bb5be8cb0f5c6d64346d4aa329d80f904bee07383", 0xc2}, {&(0x7f0000000bc0)='T[X!', 0x4}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0xa78}], 0x2}}], 0x3, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m5.138747135s ago: executing program 9 (id=4022): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 6m4.551478229s ago: executing program 7 (id=4023): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) 6m4.504289638s ago: executing program 9 (id=4024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x1000, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x6885, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x10, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be6, 0x8, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x1, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x320146f1, 0x4]}, 0x45c) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) 6m4.405175916s ago: executing program 1 (id=4025): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x10042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 6m4.337168817s ago: executing program 4 (id=4026): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r2, 0xff7f0000, 0x10, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010003704010000000000008000000000", @ANYRES32, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc0200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 5m33.701997696s ago: executing program 50 (id=4012): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xb, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 5m33.417291964s ago: executing program 51 (id=4026): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r2, 0xff7f0000, 0x10, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010003704010000000000008000000000", @ANYRES32, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc0200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 5m33.224099139s ago: executing program 52 (id=4025): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x10042, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 5m32.910212529s ago: executing program 53 (id=4023): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r1, 0x6000000) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x4000) 5m32.545101463s ago: executing program 54 (id=4024): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x1000, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x6885, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x10, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be6, 0x8, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000, 0x0, 0x1, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x320146f1, 0x4]}, 0x45c) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) 15.950685751s ago: executing program 8 (id=5197): syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 14.65137297s ago: executing program 8 (id=5199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0xfe, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8080000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0xffff1000, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0xfc, 0xff, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x2, 0x7, 0x3a, 0xfe}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd43, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xf000, 0x2, 0x5, 0xe}) 14.158797819s ago: executing program 8 (id=5202): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@private=0xa010101, @remote}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 10.455078237s ago: executing program 8 (id=5221): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) stat(0x0, &(0x7f0000000480)) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000008d0400001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000000753b7b0711c7ae89a2cb95990247ea44332a90be9"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) 9.416149573s ago: executing program 5 (id=5224): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) io_setup(0x6, &(0x7f0000001380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) io_setup(0x401, &(0x7f0000000100)=0x0) io_destroy(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) 8.34167388s ago: executing program 5 (id=5228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 7.293749614s ago: executing program 5 (id=5231): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@private=0xa010101, @remote}, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 6.829784745s ago: executing program 2 (id=5233): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x80) inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) connect$inet6(r4, &(0x7f0000001480)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xf, 0x8, &(0x7f0000001580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x943) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) 5.735199345s ago: executing program 2 (id=5236): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 5.285633201s ago: executing program 6 (id=5239): syz_open_dev$swradio(&(0x7f0000000580), 0x1, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000", @ANYRES8=r0, @ANYRES8=r1], 0x0) 5.164061138s ago: executing program 2 (id=5240): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x40080c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.789592407s ago: executing program 2 (id=5243): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.704015153s ago: executing program 5 (id=5244): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) 3.605207056s ago: executing program 6 (id=5245): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xb5, 0x1, 0x3, [{@empty, 0xffffffff}, {@empty, 0x8}, {@multicast1, 0x80000000}, {@loopback, 0x6}, {@loopback, 0x7}]}]}}}], 0x68}}], 0x2, 0x4000800) 3.454969603s ago: executing program 6 (id=5246): openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x42, 0x1}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$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") 3.239020271s ago: executing program 5 (id=5248): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.011130667s ago: executing program 8 (id=5249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 2.918501016s ago: executing program 0 (id=5250): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000380), 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/23, 0x17}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x6bf68237da62a01, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.637248151s ago: executing program 0 (id=5251): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2f0000000000000004000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES64=0x0], 0x20) 2.247486519s ago: executing program 8 (id=5252): r0 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$cdc_ncm(0x1, 0x18e, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x0, 0x6, 0x4, 0x8, 0xb7}, 0x5a, &(0x7f0000000280)={0x5, 0xf, 0x5a, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x7, 0xf0f, 0x36b8, [0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6e, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "73ebf5ff9758837833bf544d42c44e3a"}, @ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x1, 0x0, 0xc, [0x0, 0xc0cf, 0xa000, 0x3f30, 0x3fc0]}]}, 0x4, [{0x31, &(0x7f0000000340)=@string={0x31, 0x3, "55795891e7fbcbb16529c9bad043d203d76c65dcdc25761e016714d1a98f1e8865a466c35993a03b0cc5c6977a0c47"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41b}}, {0xc6, &(0x7f00000003c0)=@string={0xc6, 0x3, "c679c554e40e373f8ffdb69df5b001c7bb0cbbe44d0f38bb73c06a743e4b8ae2de5493f153e628623828b1bb31d5b17431cf627d4d1c2bdf46d205497f451820a59113d1185135b39b1071ca202a5223033537b4b7ca50e9cd62b5f398857fbc47e09e7bc1e99b8edf74f7dc84b4e656b4ff51eeed15003ee467837a814c3e60c29f6bc42da5c360f7705f6dec65f10a0c304cd588f16ca7da5859f59aa91c1649acd0388bd2fee66d1c2c6c8be6ebf12f0a402cc9dd17006951d0780525b7585192de63"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xc01}}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_usb_connect(0x1, 0x2ea, &(0x7f0000000b80)={{0x12, 0x1, 0x300, 0xe8, 0x59, 0xc9, 0x0, 0xdf6, 0x5b, 0x82e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d8, 0x1, 0x87, 0xc, 0xe0, 0x42, [{{0x9, 0x4, 0xc1, 0x0, 0x6, 0x13, 0x88, 0x38, 0x6, [], [{{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x41, 0xa1, 0xc0}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xe0, 0x13, 0x10}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x5e, 0x7, 0x3e, [@generic={0x0, 0x21, "237eb8adcc393021abd717378f03c9fb9f5f270265622bac108aaef808a2d3a6864bb8843a2eb84e2790a4b81eb489d18e39a4c06c932d00c61c10414463ad4296b0d3b6a05ccc73cd4922ac5dff914ff6d0d423183fccdf1a318fec79f5c71a0a6f21564505dabcce86a8bd40f0ec8ab4bed640c8e283531dfee60eaf8d92f654e245283d122e6c39430a7e77ffe696ba2ca2456bce623547f29f0ed21ccb1b419488c254df"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @generic={0xda, 0x22, "205ef6a7ec36684d4a4d052949179b8f78a2ed0e04329214bc9cefd234c725e53a865b2bc4114f94f88bac341cefbaafb70ea5b725505d527ea93bc0f0561a2ac83f1fe6727e32262b74304395205799b012e08a2837e12f9e71575a405742aea7d3a27207a3c22b35b969eebe5baa11b7803f086b46035f1aa63a89e267d51311ee9c9a209b02bb313d7818ecdf0c34c1199569cd68be641528ee69af72159a53f4473fa0fd4714a219ca8df1daf7aa2c51eab9dfac2032938e50a28604c648a8b46376df5417440cedc693bb97943da6c98cd8bf35900a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x7d, 0x80, [@generic={0xfa, 0x5, "2c4f4faf641d2f749b4ba4117daad2cc8dd27575f51bc0656edb9f90b52c3bee62e60b65b8ed8967ae2b9978414b96597ad87c2cec88915632161dd50bfd052dbd1ddd3fc2db83f2a2942b22f42222d2f97aa24768a42caa3996136c611f7ce85c188b985ce88931b66c99a9d61af91060f6803a2ccfa49e4715b47c2c6d61d065bb983adbea1e9880151c3cfcea0207f10d491f8220070b43e33887ab3421dc4d63eb7b04a6c56187a6f56d51fb030fe2fd091edfd863df77bb925502772957245baab331f2f58c7612daa1088a5ae6c80f00ba7b2d70e8bb956a8179cf95af808e3a34b052cf020ee7feed4b21c45914ca66d336f3b40e"}, @generic={0xae, 0x9, "1605f4757981c3d1ed137252fcdd0d445d8f626976cb6343ec9d6914f73b14064c2d0ac0ef21e3166846aeccc9553e895242203bd89a724da4a96d090997fb04a4713affeee96f10eb4669e280b8243f5d138f58554b15801979e5b00a95b3f231d383aeaefbd9c269f7604b1dad18857804eb34bf8e11a0553b2407d0cf245b50d264056f2ce37b07878a0bf68c59935a58706b3766c52a21ee638c7b45ad95374ed80390205c460167769b"}]}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1555555555555716}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x41a, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x72, 0x44, 0x5, 0x8, 0xdf6, 0x27, 0xf8df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x408, 0x2, 0x8, 0x61, 0x40, 0x5, [{{0x9, 0x4, 0x73, 0x2, 0x10, 0x6b, 0x9a, 0x1d, 0x8e, [@uac_control={{0xa, 0x24, 0x1, 0xe, 0x7}}], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0xe, 0x6c, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x4, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1c, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xd, 0x11, 0x6, [@generic={0x3, 0x8, "a3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x6, 0xf9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xca, 0x8143}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3b17}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0xe9, 0x0, 0x81}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x2, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8, 0x7}, @generic={0xbe, 0xf, "df0b7823a53be5d1496e6f7fc1cb24f746cd0c0557eb59eab5428d5741740ed7cf3e0637d45c27fd4d72b98de0c4f99057bd12b6fe40d93c497fd9747ac8181419f6e459c35ec857a4cfd9740dc98a65c045d73cf47e45b4b378b20e334b6758ce70cc4e386728f5a8aaa9177324bea80b5c751c75241ae6688733303a228ceb4371157a59db6a51f96793dc0894c1b481e082c298eda6601b9ec9f70008da83714d279082a2ac7d98397b655363c64b86299968aa7fc9d60c5a0b42"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x81, 0xc6, 0x9, [@generic={0x82, 0xd, "fb4083b62c49d27aadc25c5f5fc5bf687881313f25534fffe63d6a04a8deac5f488cfc4863bc8b2e643e03477b5e1612d052e2254f886a1f8e4a997692aec3d17805c5d59f38e52e9f3aa2aaa1d58121480524be1689413f4f8eb8d23f2be7a7d1ff43ad2823616fae23f6dc0361eb771c095df37ffcd3a7d7374f1bc0ec46e0"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x6, 0x7f, [@generic={0x5d, 0x23, "1918a203d8efcf966aaa2a671263a9b13901cd820f145f6ce2a0beb75b7c6894402ceca7422c6abf6ad4935fae371e8c4998ac35d32bf51d9cea466df0b18478fde31a9fa45d88aac08fbf0f35d81d5158cc6ffdbf6a2c8f58914d"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x95, 0x3d, 0x8, [@generic={0xfd, 0x30, "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"}, @generic={0x6b, 0x8, "3c4931ee1c4451ab0d927201b5ba66272b2cb85610d48b96bbdca9479b3f5b47eb96ea3bb6a627cf3ed5678f464e750e841701a2ac0b3b78861182b31a00da48a5795ccf2166a9fac82bed51189f552f0b75d664531cad7e3d5977bfbfed16675f43d220aa61ff7d3e"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x3, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa4, 0x727}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x3, 0xf7, 0x8, [@generic={0x9, 0x5, "5aa05b8c428374"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x5, 0x4, 0x1d}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x5, 0x81, 0xfd}}, {{0x9, 0x5, 0xe, 0x2, 0x70, 0x7, 0x5, 0x4}}]}}, {{0x9, 0x4, 0xc5, 0x3, 0x0, 0x16, 0x32, 0xaa, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x6, 0x2, 0x6}]}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x8, 0x7, 0x3, 0x8, 0x3}, 0x125, &(0x7f0000000a40)={0x5, 0xf, 0x125, 0x5, [@generic={0x6f, 0x10, 0xb, "94f8630240e322c2fd7af7482474908c0a70c8e85eb2ca9ca11d5c716f50a7f699213f2be1afe17a3992a1a21abfb0c9fdb1b445c3bc6d3b8d842d64a392bf00dc497953017a3501f737e2d1768f61ba5307129eba2ae1c851940560c514b15de5a0725bbfab1897659f0a79"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xf7, 0x4, 0x5, 0xf00f, 0x2, [0x3ff0, 0xff3f30, 0xff, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "a85424c84f2705c70ec778c7275d2daf"}, @generic={0x7e, 0x10, 0x3, "b0d052fb51ab30d76f9bea9290b7eb3f608d8ddba2aec7eb1a59b5569efdc0f11f4b9cecc006513346a8c1f28429f43c3522ea44213f3c319f57201192a5f965ed46cf04c8d85180afa8f450b85df0e3cfacda0bc909effef700bd1095e9e0eef4a514f4aa1ee62982c04542d3a8cfaf4d586b8781bb52f003f960"}]}, 0x1, [{0x49, &(0x7f0000000f40)=@string={0x49, 0x3, "31f0bcd4b6b91e8f99fff7e68fb0d0cb7a6a46c825e86506fd8006568a71c6dd5ff0983428903dc8c76f7528f251123135fce40ce4383ad9286f0b1ec9c8ca8376b12b813de23d"}}]}) write$cgroup_pid(r1, &(0x7f0000001040)=0xffffffffffffffff, 0x12) 2.12554603s ago: executing program 6 (id=5253): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x40080c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.122074927s ago: executing program 0 (id=5254): syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 1.785730458s ago: executing program 5 (id=5255): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='\x00') r1 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) 955.090594ms ago: executing program 0 (id=5256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x100000000000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x128) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000001040)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0xfe, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8080000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0xffff1000, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0xfc, 0xff, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x2, 0x7, 0x3a, 0xfe}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd43, 0x0, 0x2]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r6) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xf000, 0x2, 0x5, 0xe}) 943.029751ms ago: executing program 2 (id=5257): r0 = getpgrp(0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) process_vm_readv(r0, &(0x7f0000002e40)=[{&(0x7f0000002b80)=""/189, 0xbd}], 0x1, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 788.445683ms ago: executing program 6 (id=5258): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) 517.033158ms ago: executing program 2 (id=5259): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x0, 0x7f, 0x40, 0x4}, 0x0, 0x0}) 304.367628ms ago: executing program 6 (id=5260): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) stat(0x0, &(0x7f0000000480)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000008d0400001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000000753b7b0711c7ae89a2cb95990247ea44332a90be9"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) 243.373878ms ago: executing program 0 (id=5261): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000380), 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/23, 0x17}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x6bf68237da62a01, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 0s ago: executing program 0 (id=5262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21899 comm="syz.0.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea58e929 code=0x7ffc0000 [ 1966.744611][ T30] audit: type=1326 audit(2000001022.630:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21899 comm="syz.0.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f26ea58e929 code=0x7ffc0000 [ 1966.768276][ T30] audit: type=1326 audit(2000001022.630:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21899 comm="syz.0.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea58e929 code=0x7ffc0000 [ 1966.791158][ T30] audit: type=1326 audit(2000001022.630:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21899 comm="syz.0.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26ea58d290 code=0x7ffc0000 [ 1966.815422][ T30] audit: type=1326 audit(2000001022.630:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21899 comm="syz.0.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ea58e929 code=0x7ffc0000 [ 1966.859380][T21904] loop6: detected capacity change from 0 to 512 [ 1966.868359][T21904] EXT4-fs: Ignoring removed mblk_io_submit option [ 1966.875173][T21904] ext4: Bad value for 'debug_want_extra_isize' [ 1966.923223][T21904] loop6: detected capacity change from 0 to 512 [ 1966.955539][T21904] EXT4-fs: Ignoring removed bh option [ 1966.996484][T21904] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1967.006128][T21904] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1967.051125][T21904] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1967.080583][T21904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1967.118841][T21904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1967.460078][T19700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1967.496359][T21885] loop5: detected capacity change from 0 to 32768 [ 1967.657908][T17034] Bluetooth: hci7: command 0x0406 tx timeout [ 1967.978000][T21921] kvm: pic: non byte write [ 1967.995434][T21921] kvm: pic: non byte write [ 1968.018432][T21921] kvm: pic: non byte write [ 1968.031555][T21921] kvm: pic: non byte write [ 1968.391938][T21188] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1968.614440][T21188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.625804][T21188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.636092][T21188] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1968.645503][T21188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.695734][T21930] lo speed is unknown, defaulting to 1000 [ 1968.707962][T21930] lo speed is unknown, defaulting to 1000 [ 1968.759369][T21188] usb 7-1: config 0 descriptor?? [ 1968.911052][T21935] loop5: detected capacity change from 0 to 512 [ 1968.976622][T21935] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1969.006700][T21935] EXT4-fs (loop5): invalid journal inode [ 1969.013403][T21935] EXT4-fs (loop5): can't get journal size [ 1969.076409][T21935] EXT4-fs (loop5): 1 truncate cleaned up [ 1969.084897][T21935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1969.188293][T21177] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1969.369031][T21177] usb 9-1: Using ep0 maxpacket: 16 [ 1969.429777][T21177] usb 9-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 1969.442179][T21177] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1969.456121][T21177] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 1969.465675][T21177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.784226][T21177] usb 9-1: config 0 descriptor?? [ 1969.789864][T21188] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1969.841879][T21188] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1969.959134][T21188] cp2112 0003:10C4:EA90.001A: error requesting version [ 1969.979925][T21188] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -32 [ 1970.130687][ T50] Bluetooth: hci9: unexpected subevent 0x0a length: 91 > 30 [ 1970.159054][T21177] usb 9-1: string descriptor 0 read error: -71 [ 1970.187347][T21177] usb 9-1: USB disconnect, device number 47 [ 1970.255311][T21945] netlink: 'syz.2.4775': attribute type 4 has an invalid length. [ 1970.276635][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1970.294591][T21945] netlink: 'syz.2.4775': attribute type 4 has an invalid length. [ 1970.439845][T21950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4777'. [ 1971.987803][T21177] usb 7-1: USB disconnect, device number 28 [ 1972.225317][ T50] Bluetooth: hci9: command 0x0406 tx timeout [ 1972.424132][T21979] loop6: detected capacity change from 0 to 512 [ 1972.477862][T21979] EXT4-fs: Invalid want_extra_isize 63392 [ 1972.637002][T21981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1972.648533][T21981] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1972.650198][T21983] atomic_op ffff88803c8b4928 conn xmit_atomic 0000000000000000 [ 1972.810777][T21188] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1972.979067][T21188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1973.011941][T21991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4790'. [ 1973.018372][T21177] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1973.021704][T21188] usb 7-1: not running at top speed; connect to a high speed hub [ 1973.042836][T21188] usb 7-1: config 3 has an invalid interface number: 1 but max is 0 [ 1973.051504][T21188] usb 7-1: config 3 has no interface number 0 [ 1973.057942][T21188] usb 7-1: config 3 interface 1 has no altsetting 0 [ 1973.096853][T21188] usb 7-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 1973.106730][T21188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.115193][T21188] usb 7-1: Product: syz [ 1973.119825][T21188] usb 7-1: Manufacturer: syz [ 1973.124642][T21188] usb 7-1: SerialNumber: syz [ 1973.223508][T21177] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1973.235146][T21177] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1973.245374][T21177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.319876][T21177] usb 6-1: config 0 descriptor?? [ 1973.676166][T21188] cx231xx 7-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 1973.686194][T21188] cx231xx 7-1:3.1: Not found matching IAD interface [ 1973.713095][T21188] usb 7-1: USB disconnect, device number 29 [ 1974.036234][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1974.318575][T22013] overlayfs: missing 'lowerdir' [ 1974.673582][T22021] lo: entered allmulticast mode [ 1974.691594][T22021] tunl0: entered allmulticast mode [ 1974.703436][T22021] gre0: entered allmulticast mode [ 1974.743331][T22021] gretap0: entered allmulticast mode [ 1974.779639][T22021] erspan0: entered allmulticast mode [ 1974.795670][T22021] ip_vti0: entered allmulticast mode [ 1974.807648][T22021] ip6_vti0: entered allmulticast mode [ 1974.821658][T22021] sit0: entered allmulticast mode [ 1974.839796][T22021] ip6tnl0: entered allmulticast mode [ 1974.853791][T22021] ip6gre0: entered allmulticast mode [ 1974.961951][T22023] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1974.975055][T22023] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1975.055046][T22021] syz_tun: entered allmulticast mode [ 1975.103809][T22019] loop6: detected capacity change from 0 to 32768 [ 1975.123780][T22019] [ 1975.123780][T22019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1975.123780][T22019] [ 1975.141186][T22021] ip6gretap0: entered allmulticast mode [ 1975.156251][T22021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.166510][T22021] bridge0: entered allmulticast mode [ 1975.183353][T22021] vcan0: entered allmulticast mode [ 1975.195927][T22021] bond0: entered allmulticast mode [ 1975.201663][T22021] bond_slave_0: entered allmulticast mode [ 1975.208180][T22021] bond_slave_1: entered allmulticast mode [ 1975.222825][T22021] team0: entered allmulticast mode [ 1975.228422][T22021] team_slave_0: entered allmulticast mode [ 1975.234414][T22021] team_slave_1: entered allmulticast mode [ 1975.249167][T22021] dummy0: entered allmulticast mode [ 1975.280267][T22021] nlmon0: entered allmulticast mode [ 1975.291679][T22021] caif0: entered allmulticast mode [ 1975.298021][T22021] batadv0: entered allmulticast mode [ 1975.311756][T22021] vxcan0: entered allmulticast mode [ 1975.320577][T22021] vxcan1: entered allmulticast mode [ 1975.328866][T22021] veth0: entered allmulticast mode [ 1975.346391][T22021] veth1: entered allmulticast mode [ 1975.359933][T22021] veth0_to_bridge: entered allmulticast mode [ 1975.374188][T22021] bridge_slave_0: left promiscuous mode [ 1975.380078][T22021] bridge_slave_0: entered allmulticast mode [ 1975.392359][T22021] veth1_to_bridge: entered allmulticast mode [ 1975.414101][T22021] veth0_to_bond: entered allmulticast mode [ 1975.433997][T22021] veth1_to_bond: entered allmulticast mode [ 1975.449629][T22021] veth0_to_team: entered allmulticast mode [ 1975.469511][T22021] veth1_to_team: entered allmulticast mode [ 1975.488879][T22021] veth0_to_batadv: entered allmulticast mode [ 1975.502738][T22021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1975.511159][T22021] batadv_slave_0: entered allmulticast mode [ 1975.524835][T22021] veth1_to_batadv: entered allmulticast mode [ 1975.537896][T22021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1975.545694][T22021] batadv_slave_1: entered allmulticast mode [ 1975.559446][T22021] xfrm0: entered allmulticast mode [ 1975.571538][T22021] veth0_to_hsr: entered allmulticast mode [ 1975.584389][T22021] hsr_slave_0: entered allmulticast mode [ 1975.595103][T22021] veth1_to_hsr: entered allmulticast mode [ 1975.607904][T22021] hsr_slave_1: entered allmulticast mode [ 1975.620406][T22021] hsr0: entered allmulticast mode [ 1975.632604][T22021] veth1_virt_wifi: entered allmulticast mode [ 1975.645722][T22021] veth0_virt_wifi: entered allmulticast mode [ 1975.658421][T22021] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1975.667027][T22021] veth1_vlan: entered allmulticast mode [ 1975.679513][T22021] veth0_vlan: entered allmulticast mode [ 1975.708195][T22021] vlan0: entered allmulticast mode [ 1975.714254][T22021] vlan1: entered allmulticast mode [ 1975.993945][T21188] usb 6-1: USB disconnect, device number 43 [ 1976.289049][ T5088] [ 1976.289049][ T5088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1976.289049][ T5088] [ 1976.301985][ T5088] [ 1976.301985][ T5088] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1976.301985][ T5088] [ 1976.324413][T22021] macvlan0: entered allmulticast mode [ 1976.348394][T22021] macvlan1: entered allmulticast mode [ 1976.362805][T22021] ipvlan0: entered allmulticast mode [ 1976.369360][T22021] ipvlan1: entered allmulticast mode [ 1976.376100][T22021] veth1_macvtap: entered allmulticast mode [ 1976.382973][ T110] [ 1976.382973][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1976.382973][ T110] [ 1976.390608][T22021] veth0_macvtap: entered allmulticast mode [ 1976.405367][T19700] [ 1976.405367][T19700] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1976.405367][T19700] [ 1976.430711][T19700] [ 1976.430711][T19700] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1976.430711][T19700] [ 1976.500213][T22021] macvtap0: entered allmulticast mode [ 1976.513621][T22021] macsec0: entered allmulticast mode [ 1976.582342][T22021] geneve0: entered allmulticast mode [ 1976.602623][T22021] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.612342][T22021] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.621700][T22021] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.630956][T22021] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.643114][T22021] geneve1: entered allmulticast mode [ 1976.659841][T22021] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1976.677236][T22021] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1976.693112][T22021] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1976.711096][T22021] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1976.739194][T22021] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1976.779193][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4802'. [ 1976.793357][T22021] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 1976.805869][T22021] bridge1: entered allmulticast mode [ 1976.812222][T22021] veth2: entered allmulticast mode [ 1976.818393][T22021] veth3: entered allmulticast mode [ 1977.422719][T22039] loop8: detected capacity change from 0 to 512 [ 1978.033034][T22041] loop6: detected capacity change from 0 to 32768 [ 1978.050280][T22039] EXT4-fs: Invalid want_extra_isize 63392 [ 1978.367799][T21188] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1978.509840][T22053] tipc: Started in network mode [ 1978.515261][T22053] tipc: Node identity b667522ef30e, cluster identity 4711 [ 1978.523476][T22053] tipc: Enabled bearer , priority 0 [ 1978.553321][T21188] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1978.564620][T22053] syzkaller0: entered promiscuous mode [ 1978.570754][T22053] syzkaller0: entered allmulticast mode [ 1978.597172][T21188] usb 9-1: not running at top speed; connect to a high speed hub [ 1978.616328][T22054] tipc: Resetting bearer [ 1978.633890][T22052] tipc: Resetting bearer [ 1978.637654][T21188] usb 9-1: config 3 has an invalid interface number: 1 but max is 0 [ 1978.648295][T21188] usb 9-1: config 3 has no interface number 0 [ 1978.654621][T21188] usb 9-1: config 3 interface 1 has no altsetting 0 [ 1978.687257][T22052] tipc: Disabling bearer [ 1978.708187][T21188] usb 9-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 1978.717679][T21188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.726006][T21188] usb 9-1: Product: syz [ 1978.730968][T21188] usb 9-1: Manufacturer: syz [ 1978.735781][T21188] usb 9-1: SerialNumber: syz [ 1978.889228][T22051] loop5: detected capacity change from 0 to 8192 [ 1979.426609][T22063] veth2: entered allmulticast mode [ 1979.433122][T22063] veth3: entered allmulticast mode [ 1979.471891][T22064] loop6: detected capacity change from 0 to 512 [ 1979.594963][T22064] EXT4-fs (loop6): too many log groups per flexible block group [ 1979.606492][T22064] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 1979.652191][T22064] EXT4-fs (loop6): mount failed [ 1980.031660][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4816'. [ 1980.125249][T21188] cx231xx 9-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 1980.135289][T21188] cx231xx 9-1:3.1: Not found matching IAD interface [ 1980.145998][T21188] usb 9-1: USB disconnect, device number 48 [ 1981.306711][T22075] loop5: detected capacity change from 0 to 32768 [ 1981.395019][T22080] loop8: detected capacity change from 0 to 1024 [ 1981.514068][T22080] EXT4-fs: Ignoring removed nobh option [ 1981.520297][T22080] EXT4-fs: Ignoring removed bh option [ 1981.669736][T22080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1981.954711][T19711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1982.092590][T22091] netlink: 'syz.0.4827': attribute type 3 has an invalid length. [ 1982.100712][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'. [ 1982.143807][T22092] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 1982.201642][T22092] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 1982.435249][T22097] veth0_vlan: left promiscuous mode [ 1982.440944][T22097] veth0_vlan: entered promiscuous mode [ 1982.740760][T22094] syz.0.4829 (22094) used greatest stack depth: 2472 bytes left [ 1983.628252][T22118] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1983.639922][T22118] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1983.658265][T21177] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1983.840795][T21177] usb 7-1: Using ep0 maxpacket: 16 [ 1983.890015][T21177] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1983.900908][T21177] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1983.990915][T21177] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1984.000654][T21177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.009116][T21177] usb 7-1: Product: syz [ 1984.013488][T21177] usb 7-1: Manufacturer: syz [ 1984.018464][T21177] usb 7-1: SerialNumber: syz [ 1984.056495][T21188] kernel write not supported for file /416/attr/exec (pid: 21188 comm: kworker/0:13) [ 1984.222228][T22125] loop8: detected capacity change from 0 to 512 [ 1984.233065][T22125] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1984.256406][T22125] EXT4-fs (loop8): invalid journal inode [ 1984.262576][T22125] EXT4-fs (loop8): can't get journal size [ 1984.295772][T22125] EXT4-fs (loop8): 1 truncate cleaned up [ 1984.303982][T22125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1984.336205][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4840'. [ 1984.366292][T21177] usb 7-1: 0:2 : does not exist [ 1984.465371][T21177] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1984.540210][T21177] usb 7-1: USB disconnect, device number 30 [ 1984.619624][T21188] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1985.559849][T21188] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1985.569214][T21188] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1985.578668][T21188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.663392][T21188] usb 3-1: config 0 descriptor?? [ 1985.715902][T19711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.100060][T21177] libceph: connect (1)[c::]:6789 error -101 [ 1987.106512][T21177] libceph: mon0 (1)[c::]:6789 connect error [ 1987.151935][T22152] ceph: No mds server is up or the cluster is laggy [ 1987.432577][T22159] loop8: detected capacity change from 0 to 512 [ 1987.541783][T21188] usb 3-1: USB disconnect, device number 33 [ 1987.541807][T22159] __quota_error: 9 callbacks suppressed [ 1987.541886][T22159] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1987.565135][T22159] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1987.575534][T22159] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4850: Failed to acquire dquot type 1 [ 1987.620783][T22159] EXT4-fs (loop8): 1 truncate cleaned up [ 1987.628949][T22159] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1987.642771][T22159] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1987.827263][T19711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1988.557935][T21177] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1988.735280][T21177] usb 3-1: Using ep0 maxpacket: 16 [ 1988.761711][T21177] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1988.772516][T21177] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1988.844446][T21177] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1988.854994][T21177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.864197][T21177] usb 3-1: Product: syz [ 1988.868711][T21177] usb 3-1: Manufacturer: syz [ 1988.873524][T21177] usb 3-1: SerialNumber: syz [ 1989.171166][T21177] usb 3-1: 0:2 : does not exist [ 1989.253541][T21177] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1989.336264][T21177] usb 3-1: USB disconnect, device number 34 [ 1989.564931][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4861'. [ 1990.217809][T21188] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1990.274953][T22203] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4866'. [ 1990.341046][T22201] loop0: detected capacity change from 0 to 128 [ 1990.403551][T21188] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1990.413219][T21188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.499790][T21188] usb 3-1: config 0 descriptor?? [ 1990.521574][T21188] cp210x 3-1:0.0: cp210x converter detected [ 1990.731492][T21188] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1990.739573][T21188] cp210x 3-1:0.0: querying part number failed [ 1990.788276][T21188] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1990.868111][T22199] loop6: detected capacity change from 0 to 40427 [ 1990.881509][T22199] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1990.889721][T22199] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1990.901737][T22199] F2FS-fs (loop6): invalid crc value [ 1991.153240][T22199] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1991.160740][T22199] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1992.288301][T21188] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1992.458850][T21188] usb 6-1: Using ep0 maxpacket: 16 [ 1992.481433][T21188] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1992.492423][T21188] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1992.522241][T21188] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1992.531883][T21188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.540478][T21188] usb 6-1: Product: syz [ 1992.544853][T21188] usb 6-1: Manufacturer: syz [ 1992.549743][T21188] usb 6-1: SerialNumber: syz [ 1992.791573][T21188] usb 6-1: 0:2 : does not exist [ 1992.840205][T21188] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1992.878425][T21188] usb 6-1: USB disconnect, device number 44 [ 1993.027281][T21187] usb 3-1: USB disconnect, device number 35 [ 1993.040534][T21187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1993.053453][T21187] cp210x 3-1:0.0: device disconnected [ 1993.417117][T22237] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4877'. [ 1993.687005][T22241] loop5: detected capacity change from 0 to 1024 [ 1993.708523][T22241] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1993.773135][T22241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1993.910704][T22252] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1993.917496][T22252] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1993.925738][T22252] vhci_hcd vhci_hcd.0: Device attached [ 1993.969399][T22253] vhci_hcd: connection closed [ 1993.977390][ T1331] vhci_hcd: stop threads [ 1993.987134][ T1331] vhci_hcd: release socket [ 1993.992239][ T1331] vhci_hcd: disconnect device [ 1994.251136][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.621277][T22247] loop8: detected capacity change from 0 to 40427 [ 1994.631359][T22247] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1994.639589][T22247] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1994.664096][T22247] F2FS-fs (loop8): invalid crc value [ 1994.677971][T21187] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1994.972608][T22247] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1994.980176][T22247] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1995.266291][T22266] loop5: detected capacity change from 0 to 512 [ 1995.314295][T22266] EXT4-fs: Invalid want_extra_isize 63392 [ 1995.417573][T21187] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1995.426913][T21187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.431714][T22268] loop0: detected capacity change from 0 to 128 [ 1995.461111][T21187] usb 3-1: config 0 descriptor?? [ 1995.473646][T21187] cp210x 3-1:0.0: cp210x converter detected [ 1996.630821][T21187] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1996.638769][T21187] cp210x 3-1:0.0: querying part number failed [ 1996.671420][T21187] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1997.112697][T22274] overlayfs: missing 'lowerdir' [ 1997.439294][T22276] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1997.567117][T22276] loop0: detected capacity change from 0 to 512 [ 1997.715725][T22276] EXT4-fs (loop0): 1 orphan inode deleted [ 1997.724025][T22276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1997.738896][T15297] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1997.749953][T15297] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1997.842072][T22276] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1997.861971][T21177] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1998.020832][T22280] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4891'. [ 1998.154111][T19697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1998.173186][T21187] usb 3-1: USB disconnect, device number 36 [ 1998.189263][T21187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1998.198275][T21187] cp210x 3-1:0.0: device disconnected [ 1998.329200][T21177] usb 6-1: device descriptor read/all, error -71 [ 1998.527888][T22291] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1998.540775][T22290] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1998.550135][T22290] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1998.604282][T22293] loop0: detected capacity change from 0 to 512 [ 1998.653055][T22293] EXT4-fs: Ignoring removed nobh option [ 1998.696894][T22294] loop5: detected capacity change from 0 to 512 [ 1998.783608][T22293] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4892: corrupted inode contents [ 1998.800990][T22293] EXT4-fs (loop0): Remounting filesystem read-only [ 1998.810415][T22293] EXT4-fs (loop0): 1 truncate cleaned up [ 1998.818528][T22293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1998.831601][T22293] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1998.846286][T22293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1998.853588][T15297] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1998.866503][T15297] Quota error (device loop0): write_blk: dquota write failed [ 1998.874438][T15297] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 1998.884770][T15297] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1998.895660][T15297] Quota error (device loop0): write_blk: dquota write failed [ 1998.903313][T15297] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 1998.913878][T15297] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 1998.924319][T15297] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1998.933980][T15297] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1998.966228][T22294] EXT4-fs (loop5): 1 orphan inode deleted [ 1998.974341][T22294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1998.993521][T22294] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.040388][T15297] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1999.050910][T15297] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 1999.303418][T22305] loop6: detected capacity change from 0 to 512 [ 1999.380317][T22305] journal_path: Lookup failure for './file0/../file0' [ 1999.388180][T22305] EXT4-fs: error: could not find journal device path [ 1999.639340][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1999.663438][T22309] netlink: 'syz.2.4899': attribute type 10 has an invalid length. [ 1999.731637][T22309] team0 (unregistering): Port device team_slave_0 removed [ 1999.742679][T22311] binder: 22310:22311 ioctl c0306201 0 returned -14 [ 1999.783197][T22309] team0 (unregistering): Port device team_slave_1 removed [ 2000.245268][T22319] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4904'. [ 2000.387274][T22326] loop6: detected capacity change from 0 to 128 [ 2000.454779][ T30] audit: type=1800 audit(2000001056.440:411): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4907" name="file2" dev="loop6" ino=1048750 res=0 errno=0 [ 2000.515925][T22326] syz.6.4907: attempt to access beyond end of device [ 2000.515925][T22326] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 2000.793938][T22333] netlink: 'syz.5.4910': attribute type 3 has an invalid length. [ 2000.802244][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4910'. [ 2000.969439][T21187] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2001.130599][T21187] usb 9-1: device descriptor read/64, error -71 [ 2001.130599][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2001.130841][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2001.398004][T21187] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2001.548925][T21187] usb 9-1: device descriptor read/64, error -71 [ 2001.664889][T21187] usb usb9-port1: attempt power cycle [ 2001.954778][T22352] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4918'. [ 2002.028647][T21187] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2002.059500][T21187] usb 9-1: device descriptor read/8, error -71 [ 2002.129252][T22356] veth0_vlan: left promiscuous mode [ 2002.134813][T22356] veth0_vlan: entered promiscuous mode [ 2002.297695][T21187] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2002.334359][T21187] usb 9-1: device descriptor read/8, error -71 [ 2002.458721][T21187] usb usb9-port1: unable to enumerate USB device [ 2002.536527][T22364] netlink: 'syz.5.4923': attribute type 3 has an invalid length. [ 2002.544886][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4923'. [ 2003.578775][T22382] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4931'. [ 2004.036859][T22391] loop5: detected capacity change from 0 to 1024 [ 2004.099679][T22391] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2004.115510][T22393] netlink: 'syz.8.4936': attribute type 3 has an invalid length. [ 2004.123801][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4936'. [ 2004.238540][T22391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2004.365358][T22400] lo speed is unknown, defaulting to 1000 [ 2004.373678][T22400] lo speed is unknown, defaulting to 1000 [ 2004.638179][T11220] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2004.714763][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.810754][T11220] usb 7-1: Using ep0 maxpacket: 16 [ 2004.849100][T11220] usb 7-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2004.859992][T11220] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2004.873409][T11220] usb 7-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2004.882859][T11220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.897936][T11220] usb 7-1: config 0 descriptor?? [ 2005.190894][ T50] Bluetooth: hci7: unexpected subevent 0x0a length: 91 > 30 [ 2005.200380][ T50] Bluetooth: hci7: Ignoring HCI_Connection_Complete for existing connection [ 2005.229588][T21177] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2005.241199][T11220] usb 7-1: string descriptor 0 read error: -71 [ 2005.270850][T11220] usb 7-1: USB disconnect, device number 31 [ 2005.350126][T22421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4945'. [ 2005.425959][T21177] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2005.435836][T21177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.462856][T21177] usb 9-1: config 0 descriptor?? [ 2005.474867][T21177] cp210x 9-1:0.0: cp210x converter detected [ 2005.665430][T22426] loop5: detected capacity change from 0 to 128 [ 2005.685123][T21177] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2005.693345][T21177] cp210x 9-1:0.0: querying part number failed [ 2005.710700][T21177] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2005.720891][ T30] audit: type=1800 audit(2000001061.710:412): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4947" name="file2" dev="loop5" ino=1048751 res=0 errno=0 [ 2005.738078][T22426] syz.5.4947: attempt to access beyond end of device [ 2005.738078][T22426] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 2006.844397][T22445] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4956'. [ 2007.354906][T22449] lo speed is unknown, defaulting to 1000 [ 2007.363357][T22449] lo speed is unknown, defaulting to 1000 [ 2007.444179][T22443] loop6: detected capacity change from 0 to 32768 [ 2007.476046][T22443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4955 (22443) [ 2007.503722][T22443] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2007.514444][T22443] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 2007.525693][T22443] BTRFS info (device loop6): using free-space-tree [ 2007.769726][T11220] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2007.816362][T22468] netlink: 'syz.0.4960': attribute type 4 has an invalid length. [ 2007.848008][T22468] netlink: 'syz.0.4960': attribute type 4 has an invalid length. [ 2007.957693][T11220] usb 6-1: Using ep0 maxpacket: 16 [ 2007.982832][T11220] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2007.994218][T11220] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2008.007861][T11220] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2008.017168][T11220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.132113][T21177] usb 9-1: USB disconnect, device number 53 [ 2008.175921][T21177] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2008.185323][T21177] cp210x 9-1:0.0: device disconnected [ 2008.246488][T11220] usb 6-1: config 0 descriptor?? [ 2008.551514][T22443] BTRFS info (device loop6): rebuilding free space tree [ 2008.762516][T17034] Bluetooth: hci8: unexpected subevent 0x0a length: 91 > 30 [ 2008.770869][T17034] Bluetooth: hci8: Ignoring HCI_Connection_Complete for existing connection [ 2008.917250][T11220] usb 6-1: string descriptor 0 read error: -71 [ 2008.934939][T11220] usb 6-1: USB disconnect, device number 47 [ 2008.950699][T19700] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2009.069422][T22476] loop0: detected capacity change from 0 to 512 [ 2009.086161][T22476] EXT4-fs: Ignoring removed nobh option [ 2009.333497][T22476] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.4962: corrupted inode contents [ 2009.394078][T22476] EXT4-fs (loop0): Remounting filesystem read-only [ 2009.424703][T22476] EXT4-fs (loop0): 1 truncate cleaned up [ 2009.436241][T22476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2009.449808][T22476] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2009.478990][ T3951] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2009.490084][ T3951] Quota error (device loop0): write_blk: dquota write failed [ 2009.498386][ T3951] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 2009.501873][T22476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.508705][ T3951] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2009.529417][ T3951] Quota error (device loop0): write_blk: dquota write failed [ 2009.537003][ T3951] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 2009.547625][ T3951] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 2009.558022][ T3951] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 2009.568139][ T3951] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2009.849201][T22490] loop5: detected capacity change from 0 to 512 [ 2009.912374][T22490] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2009.949089][T22490] EXT4-fs (loop5): invalid journal inode [ 2009.955025][T22490] EXT4-fs (loop5): can't get journal size [ 2010.005752][T11220] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2010.041151][T22490] EXT4-fs (loop5): 1 truncate cleaned up [ 2010.049765][T22490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2010.181444][T11220] usb 3-1: Using ep0 maxpacket: 16 [ 2010.214406][T11220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.225153][T11220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2010.269741][T11220] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2010.279321][T11220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.287826][T11220] usb 3-1: Product: syz [ 2010.292232][T11220] usb 3-1: Manufacturer: syz [ 2010.297054][T11220] usb 3-1: SerialNumber: syz [ 2010.423481][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.438843][T21177] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2010.550622][T11220] usb 3-1: 0:2 : does not exist [ 2010.605450][T11220] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2010.636800][T21177] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2010.645781][T21177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2010.683849][T21177] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2010.693341][T21177] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2010.701838][T21177] usb 9-1: Manufacturer: syz [ 2010.710767][T11220] usb 3-1: USB disconnect, device number 37 [ 2010.730240][T21177] usb 9-1: config 0 descriptor?? [ 2010.780963][T22499] loop5: detected capacity change from 0 to 512 [ 2010.789634][T22499] EXT4-fs: Ignoring removed nobh option [ 2010.905522][T22499] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4971: corrupted inode contents [ 2010.930485][T22499] EXT4-fs (loop5): Remounting filesystem read-only [ 2010.939889][T22499] EXT4-fs (loop5): 1 truncate cleaned up [ 2010.947997][T22499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2010.961798][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2010.961921][ T12] Quota error (device loop5): write_blk: dquota write failed [ 2010.962005][ T12] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 2010.962104][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2010.962210][ T12] Quota error (device loop5): write_blk: dquota write failed [ 2010.962383][ T12] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 2010.973338][T22499] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2010.973907][T21177] rc_core: IR keymap rc-hauppauge not found [ 2010.973969][T21177] Registered IR keymap rc-empty [ 2010.975285][T21177] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2010.977759][T21177] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input70 [ 2010.995669][T22499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.997606][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 2011.065607][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 2011.068821][ T12] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 2011.104500][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2011.150564][T22493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.160491][T22493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.160736][T11220] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2011.235189][T21187] usb 9-1: USB disconnect, device number 54 [ 2011.413836][T11220] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2011.423757][T11220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.481000][T11220] usb 7-1: config 0 descriptor?? [ 2011.514068][T11220] cp210x 7-1:0.0: cp210x converter detected [ 2011.659381][T22512] loop5: detected capacity change from 0 to 512 [ 2011.683336][T22512] journal_path: Lookup failure for './file0/../file0' [ 2011.691542][T22512] EXT4-fs: error: could not find journal device path [ 2011.733910][T11220] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2011.742711][T11220] cp210x 7-1:0.0: querying part number failed [ 2011.792517][T11220] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2011.819402][T22512] syzkaller1: entered promiscuous mode [ 2011.825234][T22512] syzkaller1: entered allmulticast mode [ 2012.673311][T22519] lo speed is unknown, defaulting to 1000 [ 2012.681624][T22519] lo speed is unknown, defaulting to 1000 [ 2012.796854][T22517] tipc: Started in network mode [ 2012.802590][T22517] tipc: Node identity 427c9d6c9d58, cluster identity 4711 [ 2012.810742][T22517] tipc: Enabled bearer , priority 0 [ 2012.821216][T22517] syzkaller0: entered promiscuous mode [ 2012.823326][T22515] loop8: detected capacity change from 0 to 32768 [ 2012.826828][T22517] syzkaller0: entered allmulticast mode [ 2012.839973][T22515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4975 (22515) [ 2012.861608][T22517] tipc: Resetting bearer [ 2012.872089][T22515] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2012.883672][T22515] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 2012.892979][T22515] BTRFS info (device loop8): using free-space-tree [ 2012.902174][T22516] tipc: Resetting bearer [ 2012.914318][T22516] tipc: Disabling bearer [ 2012.974328][T22515] BTRFS info (device loop8): rebuilding free space tree [ 2013.139321][T21187] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2013.295988][T19711] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2013.338406][T21187] usb 3-1: Using ep0 maxpacket: 16 [ 2013.354532][T21187] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2013.366814][T21187] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2013.380897][T21187] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2013.391088][T21187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.435604][T21187] usb 3-1: config 0 descriptor?? [ 2013.638209][T22541] loop0: detected capacity change from 0 to 512 [ 2013.668920][T22541] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2013.685245][T17034] Bluetooth: hci4: unexpected subevent 0x0a length: 91 > 30 [ 2013.710283][T21187] usb 3-1: string descriptor 0 read error: -71 [ 2013.712059][T22541] EXT4-fs (loop0): invalid journal inode [ 2013.722980][T22541] EXT4-fs (loop0): can't get journal size [ 2013.739746][T21187] usb 3-1: USB disconnect, device number 38 [ 2013.766088][T22541] EXT4-fs (loop0): 1 truncate cleaned up [ 2013.774660][T22541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2014.021037][T21177] usb 7-1: USB disconnect, device number 32 [ 2014.044426][T21177] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2014.054564][T21177] cp210x 7-1:0.0: device disconnected [ 2014.106735][T19697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2014.478137][T22552] loop8: detected capacity change from 0 to 512 [ 2014.558013][T21177] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2014.654573][T22552] EXT4-fs (loop8): 1 orphan inode deleted [ 2014.662719][T22552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2014.680436][T22552] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2014.692360][ T5088] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2014.702771][ T5088] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 2014.727691][T21177] usb 7-1: Using ep0 maxpacket: 16 [ 2014.773902][T21177] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.784945][T21177] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2014.831380][T21172] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2014.920241][T21177] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2014.930173][T21177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.938781][T21177] usb 7-1: Product: syz [ 2014.943268][T21177] usb 7-1: Manufacturer: syz [ 2014.948218][T21177] usb 7-1: SerialNumber: syz [ 2015.053058][T21172] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2015.065124][T21172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2015.147102][T19711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.192981][T21172] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2015.203856][T21172] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2015.213192][T21172] usb 6-1: Manufacturer: syz [ 2015.285225][T21172] usb 6-1: config 0 descriptor?? [ 2015.348746][T21177] usb 7-1: 0:2 : does not exist [ 2015.409977][T21177] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2015.444108][T22561] loop0: detected capacity change from 0 to 32768 [ 2015.610712][T21177] usb 7-1: USB disconnect, device number 33 [ 2015.624606][T21172] rc_core: IR keymap rc-hauppauge not found [ 2015.631137][T21172] Registered IR keymap rc-empty [ 2015.637778][T21172] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2015.650435][T21172] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input71 [ 2015.699977][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 2015.724772][T22557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.734614][T22557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.799836][T17034] Bluetooth: hci4: command 0x0406 tx timeout [ 2015.854385][T21172] usb 6-1: USB disconnect, device number 48 [ 2016.257040][T22569] loop8: detected capacity change from 0 to 32768 [ 2016.269104][T22569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4989 (22569) [ 2016.306209][T22569] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2016.316839][T22569] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 2016.326456][T22569] BTRFS info (device loop8): using free-space-tree [ 2016.522493][T22569] BTRFS info (device loop8): rebuilding free space tree [ 2016.891511][T19711] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2016.904016][T22595] loop5: detected capacity change from 0 to 512 [ 2016.915285][T22595] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2016.942543][T22595] EXT4-fs (loop5): invalid journal inode [ 2016.949142][T22595] EXT4-fs (loop5): can't get journal size [ 2016.992804][T22595] EXT4-fs (loop5): 1 truncate cleaned up [ 2017.001313][T22595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2017.024265][T22598] loop6: detected capacity change from 0 to 128 [ 2017.071040][T22598] syz.6.4993: attempt to access beyond end of device [ 2017.071040][T22598] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 2017.089424][ T30] audit: type=1800 audit(2000001073.050:413): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4993" name="file2" dev="loop6" ino=1048753 res=0 errno=0 [ 2017.344337][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2017.515868][T22600] netlink: 'syz.0.4990': attribute type 1 has an invalid length. [ 2017.593750][T22600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2017.718910][T22600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2017.729562][T22600] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2017.746824][T22600] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2017.841571][T22605] lo speed is unknown, defaulting to 1000 [ 2017.851235][T22605] lo speed is unknown, defaulting to 1000 [ 2017.938065][T22609] macvlan2: entered promiscuous mode [ 2017.943623][T22609] macvlan2: entered allmulticast mode [ 2017.952672][T22609] bond1: entered promiscuous mode [ 2017.960572][T22609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2018.008562][T22609] bond1: left promiscuous mode [ 2018.030718][T21172] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2018.041280][T21177] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2018.139675][T22614] overlayfs: failed to resolve './file1': -2 [ 2018.198780][T21172] usb 6-1: Using ep0 maxpacket: 16 [ 2018.208812][T21177] usb 3-1: Using ep0 maxpacket: 16 [ 2018.220069][T21172] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2018.231072][T21172] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2018.244623][T21172] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2018.254654][T21172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.270074][T21172] usb 6-1: config 0 descriptor?? [ 2018.277225][T21177] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2018.288345][T21177] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2018.312911][T21177] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2018.322491][T21177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.331044][T21177] usb 3-1: Product: syz [ 2018.335587][T21177] usb 3-1: Manufacturer: syz [ 2018.340717][T21177] usb 3-1: SerialNumber: syz [ 2018.575941][T21177] usb 3-1: 0:2 : does not exist [ 2018.598189][T21172] usb 6-1: string descriptor 0 read error: -71 [ 2018.636314][T21177] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2018.648527][T21172] usb 6-1: USB disconnect, device number 49 [ 2018.767606][T21177] usb 3-1: USB disconnect, device number 39 [ 2018.787311][T22620] kvm: pic: single mode not supported [ 2018.787785][T22620] kvm: pic: level sensitive irq not supported [ 2018.797203][T22620] kvm: pic: single mode not supported [ 2018.826394][T22620] kvm: pic: single mode not supported [ 2019.600178][T22630] loop5: detected capacity change from 0 to 512 [ 2019.658696][T22630] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 2019.661577][T22632] bridge2: entered allmulticast mode [ 2019.682160][T22630] EXT4-fs (loop5): invalid journal inode [ 2019.688524][T22630] EXT4-fs (loop5): can't get journal size [ 2019.715757][T22630] EXT4-fs (loop5): 1 truncate cleaned up [ 2019.724123][T22630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2019.888173][T21177] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2019.932885][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2020.053376][T22638] syzkaller1: entered promiscuous mode [ 2020.060141][T22638] syzkaller1: entered allmulticast mode [ 2020.090405][T21177] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2020.099314][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.124871][T21177] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2020.134640][T21177] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2020.143116][T21177] usb 7-1: Manufacturer: syz [ 2020.154555][T21177] usb 7-1: config 0 descriptor?? [ 2020.405519][T22645] syzkaller1: entered promiscuous mode [ 2020.418032][T22645] syzkaller1: entered allmulticast mode [ 2020.418310][T21177] rc_core: IR keymap rc-hauppauge not found [ 2020.431455][T21177] Registered IR keymap rc-empty [ 2020.437970][T21177] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2020.451948][T21177] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input72 [ 2020.531389][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 2020.538918][T22631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.549023][T22631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.578871][T21177] usb 7-1: USB disconnect, device number 34 [ 2021.223512][T22660] lo speed is unknown, defaulting to 1000 [ 2021.232159][T22660] lo speed is unknown, defaulting to 1000 [ 2021.546458][T22669] veth2: entered allmulticast mode [ 2021.552967][T22669] veth3: entered allmulticast mode [ 2021.565544][T22669] macvtap1: entered allmulticast mode [ 2021.577102][T22669] bridge3: entered allmulticast mode [ 2021.676065][T21187] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2021.778785][T22672] overlayfs: missing 'lowerdir' [ 2021.848172][T21187] usb 9-1: Using ep0 maxpacket: 16 [ 2021.874625][T21187] usb 9-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2021.885443][T21187] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2021.898936][T21187] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2021.908813][T21187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.069793][T21187] usb 9-1: config 0 descriptor?? [ 2022.352225][T21187] usb 9-1: string descriptor 0 read error: -71 [ 2022.353082][T22678] loop6: detected capacity change from 0 to 512 [ 2022.390297][T21187] usb 9-1: USB disconnect, device number 55 [ 2022.442080][T22678] EXT4-fs: Ignoring removed nobh option [ 2022.541106][T22678] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.5022: corrupted inode contents [ 2022.572629][T22678] EXT4-fs (loop6): Remounting filesystem read-only [ 2022.580479][T22678] EXT4-fs (loop6): 1 truncate cleaned up [ 2022.588718][T22678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2022.602015][T22678] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2022.603575][ T5088] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2022.624406][ T5088] Quota error (device loop6): write_blk: dquota write failed [ 2022.632612][ T5088] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 2022.643004][ T5088] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2022.653872][ T5088] Quota error (device loop6): write_blk: dquota write failed [ 2022.661549][ T5088] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 2022.672002][ T5088] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 2022.682959][ T5088] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 2022.692485][ T5088] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2022.727098][T22678] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2022.934021][ T30] audit: type=1326 audit(2000001078.920:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22684 comm="syz.2.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2022.958005][ T30] audit: type=1326 audit(2000001078.920:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22684 comm="syz.2.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2023.069269][ T30] audit: type=1326 audit(2000001079.000:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22684 comm="syz.2.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2023.092947][ T30] audit: type=1326 audit(2000001079.000:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22684 comm="syz.2.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2023.907622][T21187] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2024.031489][T22672] loop5: detected capacity change from 0 to 32768 [ 2024.108648][T21187] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2024.118602][T21187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.175815][T21187] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2024.185383][T21187] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2024.193750][T21187] usb 3-1: Manufacturer: syz [ 2024.239941][T21187] usb 3-1: config 0 descriptor?? [ 2024.507659][T21187] rc_core: IR keymap rc-hauppauge not found [ 2024.513781][T21187] Registered IR keymap rc-empty [ 2024.520264][T21187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2024.532891][T21187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input73 [ 2024.625590][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 2024.642849][T22695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.652609][T22695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.686539][T21177] usb 3-1: USB disconnect, device number 40 [ 2024.827729][T21172] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2024.987741][T21172] usb 9-1: Using ep0 maxpacket: 16 [ 2025.010693][T21172] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2025.021640][T21172] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2025.059975][T21172] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2025.070183][T21172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.078565][T21172] usb 9-1: Product: syz [ 2025.082944][T21172] usb 9-1: Manufacturer: syz [ 2025.088068][T21172] usb 9-1: SerialNumber: syz [ 2025.346052][T21172] usb 9-1: 0:2 : does not exist [ 2025.409012][T21172] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2025.503753][T21172] usb 9-1: USB disconnect, device number 56 [ 2025.739897][T21177] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2025.927147][T21177] usb 3-1: Using ep0 maxpacket: 32 [ 2025.943617][T21177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2025.955106][T21177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.965367][T21177] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2025.975213][T21177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.040324][T21177] usb 3-1: config 0 descriptor?? [ 2026.197787][T22714] loop8: detected capacity change from 0 to 128 [ 2026.252548][T22714] syz.8.5034: attempt to access beyond end of device [ 2026.252548][T22714] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 2026.483419][T21177] usbhid 3-1:0.0: can't add hid device: -71 [ 2026.490301][T21177] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2026.538435][T21177] usb 3-1: USB disconnect, device number 41 [ 2027.397738][T22726] overlayfs: missing 'lowerdir' [ 2029.095556][T22726] loop2: detected capacity change from 0 to 32768 [ 2029.108429][T21187] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2029.303909][T21187] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2029.312907][T21187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.332438][T21187] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2029.342280][T21187] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2029.350683][T21187] usb 9-1: Manufacturer: syz [ 2029.374012][T21187] usb 9-1: config 0 descriptor?? [ 2029.637782][T21187] rc_core: IR keymap rc-hauppauge not found [ 2029.644059][T21187] Registered IR keymap rc-empty [ 2029.650609][T21187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2029.663203][T21187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input74 [ 2029.764297][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 2029.779203][T22735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.788998][T22735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.796031][T22743] kvm: pic: single mode not supported [ 2029.807111][T21187] usb 9-1: USB disconnect, device number 57 [ 2029.835632][T22743] kvm: pic: single mode not supported [ 2029.855577][T22743] kvm: pic: single mode not supported [ 2030.577679][T21177] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2030.757814][T21177] usb 3-1: Using ep0 maxpacket: 16 [ 2030.787756][T21177] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2030.798434][T21177] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2030.833431][T21177] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2030.843057][T21177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.851664][T21177] usb 3-1: Product: syz [ 2030.856053][T21177] usb 3-1: Manufacturer: syz [ 2030.861032][T21177] usb 3-1: SerialNumber: syz [ 2030.996169][T22764] loop8: detected capacity change from 0 to 512 [ 2031.047180][T22764] EXT4-fs: Invalid want_extra_isize 63392 [ 2031.090173][T21177] usb 3-1: 0:2 : does not exist [ 2031.140956][T21177] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2031.207120][T21177] usb 3-1: USB disconnect, device number 42 [ 2031.328222][T21187] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 2031.455619][T22768] loop6: detected capacity change from 0 to 512 [ 2031.464521][T22768] EXT4-fs: Ignoring removed nobh option [ 2031.499275][T21187] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2031.521296][T21187] usb 9-1: not running at top speed; connect to a high speed hub [ 2031.539678][T22768] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.5053: corrupted inode contents [ 2031.553285][T21187] usb 9-1: config 3 has an invalid interface number: 1 but max is 0 [ 2031.554065][T22768] EXT4-fs (loop6): Remounting filesystem read-only [ 2031.561883][T21187] usb 9-1: config 3 has no interface number 0 [ 2031.574668][T21187] usb 9-1: config 3 interface 1 has no altsetting 0 [ 2031.580791][T22768] EXT4-fs (loop6): 1 truncate cleaned up [ 2031.589459][T22768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2031.602628][T22768] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2031.618943][ T1331] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2031.629916][ T1331] __quota_error: 9 callbacks suppressed [ 2031.629981][ T1331] Quota error (device loop6): write_blk: dquota write failed [ 2031.643595][ T1331] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 2031.653983][ T1331] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2031.664890][ T1331] Quota error (device loop6): write_blk: dquota write failed [ 2031.672586][ T1331] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 2031.682974][ T1331] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 2031.693407][ T1331] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 2031.703003][ T1331] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2031.741449][T21187] usb 9-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 2031.751279][T21187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.759664][T21187] usb 9-1: Product: syz [ 2031.764035][T21187] usb 9-1: Manufacturer: syz [ 2031.768918][T21187] usb 9-1: SerialNumber: syz [ 2031.918458][T19700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2032.033840][T22773] overlayfs: missing 'lowerdir' [ 2032.505990][T21187] cx231xx 9-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 2032.516467][T21187] cx231xx 9-1:3.1: Not found matching IAD interface [ 2032.555913][T21187] usb 9-1: USB disconnect, device number 58 [ 2032.907791][T21188] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2033.108373][T21188] usb 6-1: Using ep0 maxpacket: 32 [ 2033.127709][T21177] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2033.133548][T21188] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 2033.144069][T21188] usb 6-1: config 0 has no interface number 0 [ 2033.173203][T21188] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2033.182845][T21188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.191203][T21188] usb 6-1: Product: syz [ 2033.195575][T21188] usb 6-1: Manufacturer: syz [ 2033.200550][T21188] usb 6-1: SerialNumber: syz [ 2033.209868][T21188] usb 6-1: config 0 descriptor?? [ 2033.225163][T21188] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2033.308203][T21177] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2033.317085][T21177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.369574][T21177] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2033.379385][T21177] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2033.382655][T22792] kvm: pic: single mode not supported [ 2033.387755][T21177] usb 9-1: Manufacturer: syz [ 2033.406919][T22792] kvm: pic: single mode not supported [ 2033.413098][T21177] usb 9-1: config 0 descriptor?? [ 2033.442147][T22792] kvm: pic: single mode not supported [ 2033.641057][T21177] rc_core: IR keymap rc-hauppauge not found [ 2033.653113][T21177] Registered IR keymap rc-empty [ 2033.659590][T21177] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2033.672346][T21177] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input75 [ 2033.771780][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 2033.793146][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.802953][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.821814][T21177] usb 9-1: USB disconnect, device number 59 [ 2033.895446][T22773] loop2: detected capacity change from 0 to 32768 [ 2034.505712][T22799] netlink: 'syz.6.5063': attribute type 1 has an invalid length. [ 2034.581841][T22799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2034.699669][T21188] gspca_topro: reg_r err -71 [ 2034.704514][T21188] gspca_topro: Sensor soi763a [ 2034.716213][T21188] usb 6-1: USB disconnect, device number 50 [ 2034.744827][T22805] loop2: detected capacity change from 0 to 1024 [ 2034.747993][T22804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2034.753796][T22805] EXT4-fs: Ignoring removed nobh option [ 2034.760172][T22804] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2034.763944][T22805] EXT4-fs: Ignoring removed bh option [ 2034.781237][T22804] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2034.793209][T22805] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 2034.840158][T22805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2034.917819][T21177] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2035.068050][T21177] usb 9-1: Using ep0 maxpacket: 16 [ 2035.077122][T21177] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2035.077282][T21177] usb 9-1: can't read configurations, error -61 [ 2035.217756][T21177] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2035.369054][T21177] usb 9-1: Using ep0 maxpacket: 16 [ 2035.377297][T21177] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2035.378028][T21177] usb 9-1: can't read configurations, error -61 [ 2035.379052][T21177] usb usb9-port1: attempt power cycle [ 2035.435075][T22812] gretap1: entered promiscuous mode [ 2035.717993][T21177] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2035.770943][T21177] usb 9-1: Using ep0 maxpacket: 16 [ 2035.811000][T21177] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2035.819157][T21177] usb 9-1: can't read configurations, error -61 [ 2035.846036][T19695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2035.958211][T21177] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2035.995217][T21177] usb 9-1: Using ep0 maxpacket: 16 [ 2036.014359][T21177] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2036.022674][T21177] usb 9-1: can't read configurations, error -61 [ 2036.042033][T21177] usb usb9-port1: unable to enumerate USB device [ 2036.080553][T21177] IPVS: starting estimator thread 0... [ 2036.189549][T22826] IPVS: using max 240 ests per chain, 12000 per kthread [ 2036.231382][T21172] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2036.306300][T22830] overlayfs: missing 'lowerdir' [ 2036.387697][T21172] usb 3-1: Using ep0 maxpacket: 8 [ 2036.401010][T21172] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 2036.409708][T21172] usb 3-1: config 0 has no interface number 1 [ 2036.416018][T21172] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2036.427301][T21172] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2036.439498][T21172] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 2036.451253][T21172] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2036.462040][T21172] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2036.475667][T21172] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 2036.487629][T21172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2036.497764][T21172] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2036.522480][T21172] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2036.531930][T21172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.540344][T21172] usb 3-1: Product: syz [ 2036.544715][T21172] usb 3-1: Manufacturer: syz [ 2036.549655][T21172] usb 3-1: SerialNumber: syz [ 2036.560605][T21172] usb 3-1: config 0 descriptor?? [ 2036.567773][T21177] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2036.569073][T22821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2036.604506][T21172] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2036.622469][T21172] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2036.687207][T21172] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2036.728034][T21177] usb 7-1: Using ep0 maxpacket: 32 [ 2036.740985][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.752938][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.763143][T21177] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2036.772587][T21177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.787589][T21177] usb 7-1: config 0 descriptor?? [ 2036.840390][T22821] loop2: detected capacity change from 0 to 256 [ 2036.861506][T22821] exfat: Unknown parameter 'keep_last_dzÆkÑ' [ 2036.901709][T21188] usb 3-1: USB disconnect, device number 43 [ 2037.221709][T21177] usbhid 7-1:0.0: can't add hid device: -71 [ 2037.228503][T21177] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2037.251713][T21177] usb 7-1: USB disconnect, device number 35 [ 2037.441166][T22830] loop5: detected capacity change from 0 to 32768 [ 2037.672085][T22836] lo speed is unknown, defaulting to 1000 [ 2037.680985][T22836] lo speed is unknown, defaulting to 1000 [ 2038.128248][T21172] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2038.181676][T22841] lo speed is unknown, defaulting to 1000 [ 2038.187990][T22841] lo speed is unknown, defaulting to 1000 [ 2038.194854][T22841] lo speed is unknown, defaulting to 1000 [ 2038.240301][T22841] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2038.298005][T22841] lo speed is unknown, defaulting to 1000 [ 2038.306625][T22841] lo speed is unknown, defaulting to 1000 [ 2038.315765][T22841] lo speed is unknown, defaulting to 1000 [ 2038.324315][T22841] lo speed is unknown, defaulting to 1000 [ 2038.333184][T22841] lo speed is unknown, defaulting to 1000 [ 2038.341678][T22841] lo speed is unknown, defaulting to 1000 [ 2038.350201][T22841] lo speed is unknown, defaulting to 1000 [ 2038.358883][T22841] lo speed is unknown, defaulting to 1000 [ 2038.367263][T22841] lo speed is unknown, defaulting to 1000 [ 2038.375734][T22841] lo speed is unknown, defaulting to 1000 [ 2038.384265][T22841] lo speed is unknown, defaulting to 1000 [ 2038.415369][T21172] usb 3-1: Using ep0 maxpacket: 16 [ 2038.429978][T21172] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2038.440841][T21172] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2038.454322][T21172] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2038.463762][T21172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.518069][T21172] usb 3-1: config 0 descriptor?? [ 2038.762096][T21172] usb 3-1: string descriptor 0 read error: -71 [ 2038.783087][T21172] usb 3-1: USB disconnect, device number 44 [ 2038.874130][T22842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2038.881207][T22842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2038.903262][T22842] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2038.925396][T22842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2038.932354][T22842] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2038.954410][T22842] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2038.961177][T22842] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2038.990453][T22842] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2039.014860][T22842] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2039.021384][T22842] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2039.075623][T22842] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 2039.100437][T22842] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2039.106864][T22842] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 2039.436203][T21188] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2039.537760][T21187] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2039.558609][T22866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5086'. [ 2039.568198][T22866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5086'. [ 2039.603287][T22868] can0: slcan on ttyS3. [ 2039.619744][T22866] syz_tun: entered promiscuous mode [ 2039.630449][T22866] syz_tun: left promiscuous mode [ 2039.652800][T21188] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2039.662240][T21188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.678975][T21188] usb 9-1: config 0 descriptor?? [ 2039.691367][T21188] cp210x 9-1:0.0: cp210x converter detected [ 2039.747874][T21187] usb 6-1: Using ep0 maxpacket: 8 [ 2039.760536][T22868] can0 (unregistered): slcan off ttyS3. [ 2039.763169][T21187] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 2039.775174][T21187] usb 6-1: config 0 has no interface number 1 [ 2039.781674][T21187] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2039.794158][T21187] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2039.806922][T21187] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 2039.812371][T22869] can0: slcan on ttyS3. [ 2039.818684][T21187] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2039.818885][T21187] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2039.847696][T21187] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 2039.859747][T21187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2039.870045][T21187] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2039.951295][T22867] can0 (unregistered): slcan off ttyS3. [ 2039.952413][T21188] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2039.964963][T21188] cp210x 9-1:0.0: querying part number failed [ 2039.975892][T21188] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2039.991863][T21187] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2040.001511][T21187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.010010][T21187] usb 6-1: Product: syz [ 2040.014393][T21187] usb 6-1: Manufacturer: syz [ 2040.019343][T21187] usb 6-1: SerialNumber: syz [ 2040.029835][T21187] usb 6-1: config 0 descriptor?? [ 2040.039476][T22862] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2040.056542][T21187] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2040.074384][T21187] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2040.127745][T21187] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2040.573630][T17034] Bluetooth: hci4: command 0x0406 tx timeout [ 2040.594592][T22862] loop5: detected capacity change from 0 to 256 [ 2040.632373][T22862] exfat: Unknown parameter 'keep_last_dzÆkÑ' [ 2040.676702][T21187] usb 6-1: USB disconnect, device number 51 [ 2040.758565][T21188] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2040.937796][T17034] Bluetooth: hci5: command 0x0406 tx timeout [ 2040.949004][T21188] usb 3-1: Using ep0 maxpacket: 32 [ 2040.962988][T21188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.974585][T21188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.984770][T21188] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2040.994272][T21188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.014412][T21188] usb 3-1: config 0 descriptor?? [ 2041.020261][T17034] Bluetooth: hci8: command 0x0406 tx timeout [ 2041.020375][T17034] Bluetooth: hci7: command 0x0406 tx timeout [ 2041.178187][ T50] Bluetooth: hci9: command 0x0406 tx timeout [ 2041.286002][T21172] IPVS: starting estimator thread 0... [ 2041.377920][T22886] IPVS: using max 240 ests per chain, 12000 per kthread [ 2041.483938][T21188] usbhid 3-1:0.0: can't add hid device: -71 [ 2041.490735][T21188] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2041.522561][T21188] usb 3-1: USB disconnect, device number 45 [ 2041.599432][T22890] lo speed is unknown, defaulting to 1000 [ 2041.607783][T22890] lo speed is unknown, defaulting to 1000 [ 2041.615870][T22890] lo speed is unknown, defaulting to 1000 [ 2041.829349][T22894] netlink: 'syz.0.5097': attribute type 3 has an invalid length. [ 2041.837970][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5097'. [ 2041.908050][T21187] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2042.050108][T22898] loop0: detected capacity change from 0 to 512 [ 2042.066714][T22898] EXT4-fs: Ignoring removed nobh option [ 2042.078837][T21187] usb 6-1: Using ep0 maxpacket: 16 [ 2042.094596][T21187] usb 6-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2042.108536][T21187] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2042.122509][T21187] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2042.135297][T21187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.189148][T21187] usb 6-1: config 0 descriptor?? [ 2042.200571][T22898] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.5099: corrupted inode contents [ 2042.285300][T22898] EXT4-fs (loop0): Remounting filesystem read-only [ 2042.319138][T22898] EXT4-fs (loop0): 1 truncate cleaned up [ 2042.327233][T22898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2042.340834][T22898] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2042.364416][ T3536] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2042.379707][ T3536] Quota error (device loop0): write_blk: dquota write failed [ 2042.387321][ T3536] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 2042.394183][T21172] usb 9-1: USB disconnect, device number 64 [ 2042.400872][ T3536] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2042.417319][ T3536] Quota error (device loop0): write_blk: dquota write failed [ 2042.425334][ T3536] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 2042.439039][ T3536] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 2042.449270][T21172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2042.450352][T21172] cp210x 9-1:0.0: device disconnected [ 2042.457985][ T3536] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 2042.473062][ T3536] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2042.604032][T21187] usb 6-1: string descriptor 0 read error: -71 [ 2042.620502][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 2042.664858][T21187] usb 6-1: USB disconnect, device number 52 [ 2042.736460][T19697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2043.251885][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 2043.258945][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 2043.265174][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 2043.271917][T17034] Bluetooth: hci9: command 0x0406 tx timeout [ 2043.338619][T21172] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2043.499568][T22920] loop6: detected capacity change from 0 to 128 [ 2043.528119][T21172] usb 9-1: Using ep0 maxpacket: 32 [ 2043.555747][T21172] usb 9-1: config 0 has an invalid interface number: 9 but max is 0 [ 2043.564426][T21172] usb 9-1: config 0 has no interface number 0 [ 2043.631250][T21172] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2043.640878][T21172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.649545][T21172] usb 9-1: Product: syz [ 2043.654312][T21172] usb 9-1: Manufacturer: syz [ 2043.659458][T21172] usb 9-1: SerialNumber: syz [ 2043.684702][T21172] usb 9-1: config 0 descriptor?? [ 2043.717169][T21172] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2044.301603][T22927] netlink: 'syz.0.5109': attribute type 3 has an invalid length. [ 2044.311616][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5109'. [ 2044.582112][T22922] loop5: detected capacity change from 0 to 40427 [ 2044.593236][T22922] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2044.601485][T22922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2044.621787][T22922] F2FS-fs (loop5): invalid crc value [ 2044.678849][T21177] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2044.698972][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 2044.875904][T22922] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2044.883295][T22922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2045.034282][T21177] usb 7-1: Using ep0 maxpacket: 32 [ 2045.046482][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2045.057940][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.068154][T21177] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2045.077673][T21177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.111349][T21177] usb 7-1: config 0 descriptor?? [ 2045.168230][T21172] gspca_topro: reg_r err -71 [ 2045.173217][T21172] gspca_topro: Sensor soi763a [ 2045.185455][T21172] usb 9-1: USB disconnect, device number 65 [ 2045.338124][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 2045.344575][T19698] Bluetooth: hci7: command 0x0406 tx timeout [ 2045.543636][T21177] usbhid 7-1:0.0: can't add hid device: -71 [ 2045.550353][T21177] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2045.572626][T21177] usb 7-1: USB disconnect, device number 36 [ 2046.392700][T22948] lo speed is unknown, defaulting to 1000 [ 2046.401136][T22948] lo speed is unknown, defaulting to 1000 [ 2046.409545][T22948] lo speed is unknown, defaulting to 1000 [ 2046.556308][T22956] netlink: 'syz.8.5119': attribute type 1 has an invalid length. [ 2046.610547][T22956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2046.867763][T21177] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2046.977902][T22958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2046.986561][T22958] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2047.003913][T22958] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2047.027933][T21177] usb 7-1: Using ep0 maxpacket: 16 [ 2047.052151][T21177] usb 7-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2047.062857][T21177] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2047.076372][T21177] usb 7-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2047.085788][T21177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.110426][T21177] usb 7-1: config 0 descriptor?? [ 2047.214569][T22960] loop2: detected capacity change from 0 to 1024 [ 2047.258512][T22960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2047.398768][T21177] usb 7-1: string descriptor 0 read error: -71 [ 2047.430629][T22963] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2047.458942][T22965] overlayfs: missing 'lowerdir' [ 2047.459739][T21177] usb 7-1: USB disconnect, device number 37 [ 2047.486322][T22967] netlink: 'syz.8.5122': attribute type 3 has an invalid length. [ 2047.494467][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5122'. [ 2047.746954][T22969] netlink: 'syz.8.5123': attribute type 1 has an invalid length. [ 2047.830347][T22969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2048.303722][T22973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2048.312587][T22973] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2048.330440][T22973] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2048.415211][T22975] gretap1: entered promiscuous mode [ 2048.443416][T22969] macvlan2: entered promiscuous mode [ 2048.450852][T22969] macvlan2: entered allmulticast mode [ 2048.466925][T22969] bond2: entered promiscuous mode [ 2048.474526][T22969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2048.612839][T22969] bond2: left promiscuous mode [ 2048.961958][T21187] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2049.168623][T21187] usb 7-1: Using ep0 maxpacket: 32 [ 2049.192958][T21187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.205281][T21187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.215524][T21187] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2049.225008][T21187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.251037][T21187] usb 7-1: config 0 descriptor?? [ 2049.709758][T21187] usbhid 7-1:0.0: can't add hid device: -71 [ 2049.716573][T21187] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2049.738667][T21188] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 2049.759529][T21187] usb 7-1: USB disconnect, device number 38 [ 2049.871121][T22998] netlink: 'syz.8.5133': attribute type 3 has an invalid length. [ 2049.879609][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5133'. [ 2049.971721][T21188] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.986159][T21188] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2050.016471][T21188] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2050.026458][T21188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.034839][T21188] usb 6-1: Product: syz [ 2050.039326][T21188] usb 6-1: Manufacturer: syz [ 2050.044129][T21188] usb 6-1: SerialNumber: syz [ 2050.056575][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5134'. [ 2050.090269][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5134'. [ 2051.211692][T21188] usb 6-1: 0:2 : does not exist [ 2051.449089][T21188] usb 6-1: USB disconnect, device number 53 [ 2051.618277][T23008] lo speed is unknown, defaulting to 1000 [ 2051.626473][T23008] lo speed is unknown, defaulting to 1000 [ 2051.634983][T23008] lo speed is unknown, defaulting to 1000 [ 2051.818984][T21187] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2051.867032][T21186] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2051.966543][T23012] loop0: detected capacity change from 0 to 1024 [ 2052.002026][T23012] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2052.013300][T21187] usb 7-1: Using ep0 maxpacket: 8 [ 2052.038641][T21186] usb 9-1: Using ep0 maxpacket: 16 [ 2052.057261][T21187] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 2052.060971][T23012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2052.065784][T21187] usb 7-1: config 0 has no interface number 1 [ 2052.084849][T21187] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2052.096252][T21187] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2052.108398][T21187] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 2052.120548][T21187] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2052.131091][T21187] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2052.144513][T21187] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 2052.156356][T21187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2052.166470][T21187] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2052.236783][T19695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2052.245426][T21186] usb 9-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 2052.256620][T21186] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2052.270165][T21186] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2052.279531][T21186] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.294825][T23017] binder: BINDER_SET_CONTEXT_MGR already set [ 2052.301426][T23017] binder: 23016:23017 ioctl 4018620d 200000000040 returned -16 [ 2052.319419][T21186] usb 9-1: config 0 descriptor?? [ 2052.337862][T21187] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2052.347557][T21187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.356072][T21187] usb 7-1: Product: syz [ 2052.360720][T21187] usb 7-1: Manufacturer: syz [ 2052.365710][T21187] usb 7-1: SerialNumber: syz [ 2052.385237][T21187] usb 7-1: config 0 descriptor?? [ 2052.397384][T23007] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2052.423341][T21187] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2052.445095][T21187] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2052.566495][T21186] usb 9-1: string descriptor 0 read error: -71 [ 2052.583586][T21186] usb 9-1: USB disconnect, device number 66 [ 2052.604259][T21187] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2052.645466][T23007] loop6: detected capacity change from 0 to 256 [ 2052.663162][T23007] exfat: Unknown parameter 'keep_last_dzÆkÑ' [ 2052.691434][T21187] usb 7-1: USB disconnect, device number 39 [ 2052.711355][T19697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2053.484725][T23033] netlink: 'syz.0.5144': attribute type 3 has an invalid length. [ 2053.495446][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'. [ 2053.620875][T23037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5146'. [ 2053.630415][T23037] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5146'. [ 2053.653764][T23037] syz_tun: entered promiscuous mode [ 2053.672933][T23037] syz_tun: left promiscuous mode [ 2053.857963][T21177] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2053.919444][T23045] loop2: detected capacity change from 0 to 512 [ 2053.929778][T23045] EXT4-fs: Ignoring removed nobh option [ 2053.946135][T23045] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 2053.970369][T23045] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.5150: invalid indirect mapped block 2683928664 (level 1) [ 2053.998150][T23045] EXT4-fs (loop2): 1 truncate cleaned up [ 2054.006020][T23045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2054.038020][T21177] usb 7-1: Using ep0 maxpacket: 32 [ 2054.050619][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.062246][T21177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.072622][T21177] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2054.082093][T21177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.097890][T21187] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 2054.118076][T21177] usb 7-1: config 0 descriptor?? [ 2054.142243][T23045] netlink: 'syz.2.5150': attribute type 10 has an invalid length. [ 2054.226100][T23050] loop8: detected capacity change from 0 to 1024 [ 2054.251608][T23050] EXT4-fs: Ignoring removed nobh option [ 2054.258834][T23050] EXT4-fs: Ignoring removed bh option [ 2054.266596][T19695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2054.283183][T21187] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.293655][T21187] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2054.306820][T23050] EXT4-fs (loop8): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 2054.327104][T21187] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2054.336593][T21187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.345121][T21187] usb 6-1: Product: syz [ 2054.349621][T21187] usb 6-1: Manufacturer: syz [ 2054.354440][T21187] usb 6-1: SerialNumber: syz [ 2054.439331][T23050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2054.569222][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.576371][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.583755][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.591327][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.598699][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.605785][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.613021][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.620462][T21177] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2054.656697][T21187] usb 6-1: 0:2 : does not exist [ 2054.716813][T21177] savu 0003:1E7D:2D5A.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 2054.747720][T21187] usb 6-1: USB disconnect, device number 54 [ 2054.773355][T21177] usb 7-1: USB disconnect, device number 40 [ 2055.096380][T19711] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2055.203607][T23061] overlayfs: missing 'lowerdir' [ 2055.466242][T23065] netlink: 'syz.6.5158': attribute type 3 has an invalid length. [ 2055.474646][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5158'. [ 2055.492227][T23067] netlink: 'syz.8.5159': attribute type 1 has an invalid length. [ 2055.539624][T21177] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2055.561844][T23067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2055.640484][T23069] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2055.649656][T23069] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2055.666788][T23069] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 2055.699178][T21177] usb 6-1: Using ep0 maxpacket: 8 [ 2055.722417][T21177] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 2055.731507][T21177] usb 6-1: config 0 has no interface number 1 [ 2055.738104][T21177] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2055.749479][T21177] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2055.761883][T21177] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 2055.773670][T21177] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2055.784254][T21177] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2055.797800][T21177] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 2055.809674][T21177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2055.820110][T21177] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2055.852542][T23067] macvlan2: entered promiscuous mode [ 2055.858221][T23067] macvlan2: entered allmulticast mode [ 2055.866615][T23067] bond3: entered promiscuous mode [ 2055.870267][T21177] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2055.874315][T23067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2055.881886][T21177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.896300][T21177] usb 6-1: Product: syz [ 2055.900918][T21177] usb 6-1: Manufacturer: syz [ 2055.905734][T21177] usb 6-1: SerialNumber: syz [ 2055.925850][T23067] bond3: left promiscuous mode [ 2055.950284][T21177] usb 6-1: config 0 descriptor?? [ 2055.960068][T23063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2055.988780][T21177] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2056.006706][T21177] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2056.126617][T21177] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2056.211481][T23077] netlink: 'syz.6.5161': attribute type 4 has an invalid length. [ 2056.252240][T23063] loop5: detected capacity change from 0 to 256 [ 2056.280190][T23063] exfat: Unknown parameter 'keep_last_dzÆkÑ' [ 2056.309543][T21177] usb 6-1: USB disconnect, device number 55 [ 2057.177744][T21177] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2057.356233][T21177] usb 3-1: Using ep0 maxpacket: 32 [ 2057.371668][T21177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.383327][T21177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.393556][T21177] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2057.402966][T21177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.455300][T21177] usb 3-1: config 0 descriptor?? [ 2057.653895][T23091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2057.667697][T23091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2057.674325][T23091] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2057.681090][T23091] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2057.687912][T23091] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2058.140523][T23113] loop6: detected capacity change from 0 to 128 [ 2058.232791][T23112] siw: device registration error -23 [ 2058.401534][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.408827][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.415945][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.423294][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.430673][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.437870][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.445260][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.452547][T21177] savu 0003:1E7D:2D5A.001C: unknown main item tag 0x0 [ 2058.471858][T21177] savu 0003:1E7D:2D5A.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2058.499414][T21177] usb 3-1: USB disconnect, device number 46 [ 2058.918359][T23112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2058.925312][T23112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2058.932339][T23112] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2058.939280][T23112] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2058.945866][T23112] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2059.797700][T21172] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2059.989851][T21172] usb 7-1: Using ep0 maxpacket: 32 [ 2060.018289][T21172] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 2060.026756][T21172] usb 7-1: config 0 has no interface number 0 [ 2060.073184][T21172] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2060.083368][T21172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.091962][T21172] usb 7-1: Product: syz [ 2060.096328][T21172] usb 7-1: Manufacturer: syz [ 2060.101822][T21172] usb 7-1: SerialNumber: syz [ 2060.269937][T23129] bridge1: entered allmulticast mode [ 2060.308706][T19698] Bluetooth: hci4: command 0x0406 tx timeout [ 2060.320045][T21172] usb 7-1: config 0 descriptor?? [ 2060.395568][T21172] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2060.811471][T23133] loop2: detected capacity change from 0 to 4096 [ 2060.859758][T23133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2061.038820][T19698] Bluetooth: hci9: command 0x0406 tx timeout [ 2061.038946][T19698] Bluetooth: hci8: command 0x0406 tx timeout [ 2061.039053][T19698] Bluetooth: hci7: command 0x0406 tx timeout [ 2061.039156][T19698] Bluetooth: hci5: command 0x0406 tx timeout [ 2061.887885][T19695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2061.923194][T23147] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 2061.982325][T23147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2062.024233][T23149] loop5: detected capacity change from 0 to 1024 [ 2062.035970][T21172] gspca_topro: reg_r err -71 [ 2062.041096][T21172] gspca_topro: Sensor soi763a [ 2062.061547][T21172] usb 7-1: USB disconnect, device number 41 [ 2062.065742][T23149] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2062.079216][T23149] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2062.145326][T23149] JBD2: no valid journal superblock found [ 2062.152025][T23149] EXT4-fs (loop5): Could not load journal inode [ 2062.183475][T23147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2062.192506][T23147] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2062.210051][T23147] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2062.257964][T23149] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 2062.336307][T23154] gretap1: entered promiscuous mode [ 2062.377688][T23153] macvlan2: entered promiscuous mode [ 2062.383233][T23153] macvlan2: entered allmulticast mode [ 2062.393798][T23153] bond2: entered promiscuous mode [ 2062.397724][T21177] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2062.401453][T23153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2062.436231][T23153] bond2: left promiscuous mode [ 2062.532183][T23158] overlayfs: missing 'lowerdir' [ 2062.559818][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2062.566666][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2062.595004][T21177] usb 9-1: Using ep0 maxpacket: 32 [ 2062.624692][T21177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.636109][T21177] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.646420][T21177] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2062.655952][T21177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.759784][T21177] usb 9-1: config 0 descriptor?? [ 2062.924136][T23162] fuse: Unknown parameter 'group_id00000000000000000000' [ 2063.278259][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.285803][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.293279][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.300584][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.307793][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.314848][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.322111][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.329365][T21177] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 2063.583123][T21177] savu 0003:1E7D:2D5A.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 2063.599834][T21177] usb 9-1: USB disconnect, device number 67 [ 2064.619012][T23172] loop6: detected capacity change from 0 to 1024 [ 2064.732457][T23172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2064.762737][T23174] bridge2: entered allmulticast mode [ 2064.769348][T23174] bond1: entered allmulticast mode [ 2064.775219][T23174] bond2: entered allmulticast mode [ 2064.787158][T23174] gretap1: left promiscuous mode [ 2064.792425][T23174] gretap1: entered allmulticast mode [ 2064.801103][T23174] bridge3: entered allmulticast mode [ 2064.815145][T23174] bridge4: entered allmulticast mode [ 2064.826722][T23174] bond3: entered allmulticast mode [ 2065.965197][T23179] loop0: detected capacity change from 0 to 1024 [ 2065.978092][T23179] EXT4-fs: Ignoring removed nobh option [ 2065.984033][T23179] EXT4-fs: Ignoring removed bh option [ 2066.243674][T23179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2067.166630][T19697] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2067.215367][T23187] siw: device registration error -23 [ 2067.839626][T23187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2067.846456][T23187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2067.853448][T23187] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2067.860323][T23187] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 2067.866971][T23187] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 2067.971061][T19700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2068.128014][T21187] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2068.174134][T23204] fuse: Unknown parameter 'group_id00000000000000000000' [ 2068.250356][T23207] netlink: 'syz.2.5206': attribute type 1 has an invalid length. [ 2068.310345][T23207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2068.321019][T21187] usb 9-1: Using ep0 maxpacket: 32 [ 2068.371193][T21187] usb 9-1: config 0 has no interfaces? [ 2068.391014][T21187] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2068.400925][T21187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.409566][T21187] usb 9-1: Product: syz [ 2068.413822][T23209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2068.415734][T23209] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2068.420920][T21187] usb 9-1: Manufacturer: syz [ 2068.436080][T21187] usb 9-1: SerialNumber: syz [ 2068.438273][T23209] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2068.538824][T21187] usb 9-1: config 0 descriptor?? [ 2068.575688][T23212] binder: 23211:23212 ioctl 4018620d 0 returned -22 [ 2068.884523][T23218] bridge_slave_0: entered promiscuous mode [ 2068.891024][T23218] bridge_slave_0: left allmulticast mode [ 2068.923500][T23218] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5208'. [ 2069.191008][T23217] loop6: detected capacity change from 0 to 8192 [ 2069.258031][T19698] Bluetooth: hci4: command 0x0406 tx timeout [ 2069.752037][T23232] picdev_write: 2 callbacks suppressed [ 2069.752113][T23232] kvm: pic: non byte write [ 2069.774303][T23232] kvm: pic: non byte write [ 2069.786909][T23232] kvm: pic: level sensitive irq not supported [ 2069.898149][T19698] Bluetooth: hci9: command 0x0406 tx timeout [ 2069.898229][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 2069.898332][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 2069.904425][T19698] Bluetooth: hci5: command 0x0406 tx timeout [ 2070.369911][T23220] loop2: detected capacity change from 0 to 32768 [ 2070.413614][T23220] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5211 (23220) [ 2070.480394][T23220] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2070.491582][T23220] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 2070.500938][T23220] BTRFS info (device loop2): using free-space-tree [ 2070.507980][T23246] xt_hashlimit: size too large, truncated to 1048576 [ 2071.002801][T23263] fuse: Bad value for 'user_id' [ 2071.009229][T23263] fuse: Bad value for 'user_id' [ 2071.102202][T21177] usb 9-1: USB disconnect, device number 68 [ 2071.151111][T23220] BTRFS info (device loop2): rebuilding free space tree [ 2071.267711][T21186] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2071.477970][T21186] usb 7-1: Using ep0 maxpacket: 8 [ 2071.528549][T21186] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2071.538058][T21186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.546303][T21186] usb 7-1: Product: syz [ 2071.551210][T21186] usb 7-1: Manufacturer: syz [ 2071.556031][T21186] usb 7-1: SerialNumber: syz [ 2071.573934][T21186] usb 7-1: config 0 descriptor?? [ 2071.595352][T21186] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2071.878477][T23274] bridge_slave_0: entered promiscuous mode [ 2071.884564][T23274] bridge_slave_0: left allmulticast mode [ 2071.936172][T23274] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5222'. [ 2071.942120][T19695] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2072.486675][T23279] loop5: detected capacity change from 0 to 1024 [ 2072.527146][T23279] EXT4-fs: Ignoring removed nobh option [ 2072.533316][T23279] EXT4-fs: Ignoring removed bh option [ 2072.671711][T23279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2073.219949][T23287] kvm: pic: non byte write [ 2073.247358][T23287] kvm: pic: non byte write [ 2073.249095][T19705] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2073.263363][T23287] kvm: pic: level sensitive irq not supported [ 2073.276362][T23287] kvm: pic: non byte write [ 2073.318140][T23287] kvm: pic: non byte write [ 2073.546967][T23294] netlink: 'syz.2.5229': attribute type 1 has an invalid length. [ 2073.573608][T23296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2073.627134][T23294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2073.832983][T23294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2073.843656][T23294] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2073.861525][T23294] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2074.094835][T23302] gretap1: entered promiscuous mode [ 2074.112883][T23302] bond2: (slave gretap1): making interface the new active one [ 2074.123709][T23302] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2074.191610][T23303] macvlan2: entered promiscuous mode [ 2074.197174][T23303] macvlan2: entered allmulticast mode [ 2074.205721][T23303] bond2: entered promiscuous mode [ 2074.214139][T23303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2074.421199][T23303] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2074.471095][T23303] bond2: left promiscuous mode [ 2074.689239][T21177] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2074.866520][T23313] loop2: detected capacity change from 0 to 512 [ 2074.867813][T21177] usb 6-1: Using ep0 maxpacket: 32 [ 2074.919723][T21177] usb 6-1: config 0 has no interfaces? [ 2074.941160][T23313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5233: bg 0: block 131: padding at end of block bitmap is not set [ 2074.951905][T21177] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2074.957593][T21186] gspca_sonixj: reg_r err -71 [ 2074.965168][T21177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.970123][T21186] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 2074.978892][T21177] usb 6-1: Product: syz [ 2074.990329][T21186] usb 7-1: USB disconnect, device number 42 [ 2074.996453][T21177] usb 6-1: Manufacturer: syz [ 2075.001445][T21177] usb 6-1: SerialNumber: syz [ 2075.037009][T23313] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 2075.072859][T21177] usb 6-1: config 0 descriptor?? [ 2075.073415][T23313] EXT4-fs (loop2): 1 truncate cleaned up [ 2075.086081][T23313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2075.206390][ T30] audit: type=1326 audit(2000001131.190:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.229935][ T30] audit: type=1326 audit(2000001131.190:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.252895][ T30] audit: type=1326 audit(2000001131.190:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.275850][ T30] audit: type=1326 audit(2000001131.190:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.298941][ T30] audit: type=1326 audit(2000001131.190:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.321841][ T30] audit: type=1326 audit(2000001131.190:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.344871][ T30] audit: type=1326 audit(2000001131.190:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.368264][ T30] audit: type=1326 audit(2000001131.190:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.391171][ T30] audit: type=1326 audit(2000001131.190:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.414161][ T30] audit: type=1326 audit(2000001131.190:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23311 comm="syz.2.5233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc0c918e929 code=0x7ffc0000 [ 2075.780612][T23324] bridge_slave_0: entered promiscuous mode [ 2075.786688][T23324] bridge_slave_0: left allmulticast mode [ 2075.848518][T19695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2075.860072][T23324] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5235'. [ 2076.699216][T21177] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 2076.800200][T23342] kvm: pic: non byte write [ 2076.805093][T23342] kvm: pic: non byte write [ 2076.828386][T23342] kvm: pic: level sensitive irq not supported [ 2076.839462][T23342] kvm: pic: non byte write [ 2076.869115][T23342] kvm: pic: non byte write [ 2076.886255][T21177] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.897572][T21177] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2076.958224][T21177] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2076.967801][T21177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.976037][T21177] usb 7-1: Product: syz [ 2076.980865][T21177] usb 7-1: Manufacturer: syz [ 2076.985680][T21177] usb 7-1: SerialNumber: syz [ 2077.259668][T21177] usb 7-1: 0:2 : does not exist [ 2077.305624][T21177] usb 7-1: USB disconnect, device number 43 [ 2077.858304][T21177] usb 6-1: USB disconnect, device number 56 [ 2078.198835][T21186] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2078.403253][T21186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2078.414790][T21186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2078.447013][T23363] loop6: detected capacity change from 0 to 512 [ 2078.469581][T21186] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2078.479206][T21186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2078.488221][T21186] usb 3-1: SerialNumber: syz [ 2078.504155][T23363] EXT4-fs: Ignoring removed nobh option [ 2078.532234][T23367] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5247'. [ 2078.548314][T21186] usb 3-1: bad CDC descriptors [ 2078.554958][T21186] usb-storage 3-1:1.0: USB Mass Storage device detected [ 2078.609072][T21186] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2078.672707][T23363] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.5246: corrupted inode contents [ 2078.706979][T21186] scsi host1: usb-storage 3-1:1.0 [ 2078.722344][T23363] EXT4-fs (loop6): Remounting filesystem read-only [ 2078.732775][T23363] EXT4-fs (loop6): 1 truncate cleaned up [ 2078.740717][T23363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2078.754144][T23363] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2078.783867][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2078.794974][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2078.806517][ T12] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 2078.821337][T23363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2079.644461][T23384] kvm: pic: non byte write [ 2079.678764][T23384] kvm: pic: non byte write [ 2079.683655][T23384] kvm: pic: level sensitive irq not supported [ 2079.761455][T23384] kvm: pic: non byte write [ 2079.871705][T23384] kvm: pic: non byte write [ 2080.338422][T21177] usb 9-1: new low-speed USB device number 69 using dummy_hcd [ 2080.507686][T21177] usb 9-1: Invalid ep0 maxpacket: 64 [ 2080.602877][T21172] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2080.678821][T21177] usb 9-1: new low-speed USB device number 70 using dummy_hcd [ 2080.776357][T21186] usb 3-1: USB disconnect, device number 47 [ 2080.808265][T21172] usb 6-1: Using ep0 maxpacket: 32 [ 2080.820689][T21172] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2080.827875][T21172] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2080.837188][T21172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.859715][T21172] usb 6-1: config 0 descriptor?? [ 2080.868624][T21177] usb 9-1: Invalid ep0 maxpacket: 64 [ 2080.875234][T21177] usb usb9-port1: attempt power cycle [ 2081.238256][T21177] usb 9-1: new low-speed USB device number 71 using dummy_hcd [ 2081.281507][T21177] usb 9-1: Invalid ep0 maxpacket: 64 [ 2081.428136][T21177] usb 9-1: new low-speed USB device number 72 using dummy_hcd [ 2081.461006][T21177] usb 9-1: Invalid ep0 maxpacket: 64 [ 2081.479712][T21177] usb usb9-port1: unable to enumerate USB device [ 2081.508342][T11220] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 2081.714933][T21172] corsair-cpro 0003:1B1C:0C10.001E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 2081.766007][T11220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2081.778040][T11220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2081.826543][T11220] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2081.836626][T11220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2081.845640][T11220] usb 3-1: SerialNumber: syz [ 2081.896344][T21172] ===================================================== [ 2081.904526][T21172] BUG: KMSAN: uninit-value in get_temp_cnct+0x1df/0x3b0 [ 2081.912382][T21172] get_temp_cnct+0x1df/0x3b0 [ 2081.917187][T21172] ccp_probe+0x458/0x790 [ 2081.921874][T21172] hid_device_probe+0x536/0xab0 [ 2081.927090][T21172] really_probe+0x4d1/0xd90 [ 2081.932161][T21172] __driver_probe_device+0x268/0x380 [ 2081.938392][T21172] driver_probe_device+0x70/0x8b0 [ 2081.943796][T21172] __device_attach_driver+0x4ee/0x950 [ 2081.949664][T21172] bus_for_each_drv+0x3e0/0x680 [ 2081.955181][T21172] __device_attach+0x3c8/0x5c0 [ 2081.960433][T21172] device_initial_probe+0x33/0x40 [ 2081.965782][T21172] bus_probe_device+0x3ba/0x5e0 [ 2081.971209][T21172] device_add+0x12a9/0x1c10 [ 2081.976022][T21172] hid_add_device+0x5ed/0x7b0 [ 2081.981276][T21172] usbhid_probe+0x1fec/0x2660 [ 2081.986518][T21172] usb_probe_interface+0xd01/0x1310 [ 2081.992265][T21172] really_probe+0x4d1/0xd90 [ 2081.997104][T21172] __driver_probe_device+0x268/0x380 [ 2082.002919][T21172] driver_probe_device+0x70/0x8b0 [ 2082.008363][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.014071][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.019418][T21172] __device_attach+0x3c8/0x5c0 [ 2082.024492][T21172] device_initial_probe+0x33/0x40 [ 2082.030014][T21172] bus_probe_device+0x3ba/0x5e0 [ 2082.035186][T21172] device_add+0x12a9/0x1c10 [ 2082.040207][T21172] usb_set_configuration+0x3493/0x3b70 [ 2082.046143][T21172] usb_generic_driver_probe+0xfc/0x290 [ 2082.052303][T21172] usb_probe_device+0x38d/0x690 [ 2082.057563][T21172] really_probe+0x4d1/0xd90 [ 2082.062444][T21172] __driver_probe_device+0x268/0x380 [ 2082.068265][T21172] driver_probe_device+0x70/0x8b0 [ 2082.073649][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.079536][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.084676][T21172] __device_attach+0x3c8/0x5c0 [ 2082.090093][T21172] device_initial_probe+0x33/0x40 [ 2082.095453][T21172] bus_probe_device+0x3ba/0x5e0 [ 2082.100788][T21172] device_add+0x12a9/0x1c10 [ 2082.105606][T21172] usb_new_device+0x104b/0x20c0 [ 2082.110918][T21172] hub_event+0x5588/0x7580 [ 2082.115666][T21172] process_scheduled_works+0xb91/0x1d80 [ 2082.121822][T21172] worker_thread+0xedf/0x1590 [ 2082.126830][T21172] kthread+0xd59/0xf00 [ 2082.131338][T21172] ret_from_fork+0x1e0/0x310 [ 2082.136236][T21172] ret_from_fork_asm+0x1a/0x30 [ 2082.141584][T21172] [ 2082.144130][T21172] Uninit was stored to memory at: [ 2082.149986][T21172] ------------[ cut here ]------------ [ 2082.155851][T21172] WARNING: CPU: 1 PID: 21172 at kernel/stacktrace.c:29 stack_trace_print+0xd4/0xf0 [ 2082.165708][T21172] Modules linked in: [ 2082.169874][T21172] CPU: 1 UID: 0 PID: 21172 Comm: kworker/1:9 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 2082.182581][T21172] Tainted: [W]=WARN [ 2082.186496][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2082.197024][T21172] Workqueue: usb_hub_wq hub_event [ 2082.202480][T21172] RIP: 0010:stack_trace_print+0xd4/0xf0 [ 2082.208403][T21172] Code: 79 55 03 92 89 de ba 20 00 00 00 4c 89 e1 e8 d3 6f 4d ff 49 83 c6 08 49 ff cd 0f 85 6e ff ff ff eb 0b e8 3f 5a c3 00 eb d4 90 <0f> 0b 90 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 01 01 0f cc 66 0f 1f [ 2082.228641][T21172] RSP: 0000:ffff8880614b62e8 EFLAGS: 00010246 [ 2082.235104][T21172] RAX: ffff88810675ccd8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2082.243443][T21172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2082.251715][T21172] RBP: ffff8880614b6310 R08: 0000000000000000 R09: 0000000000000000 [ 2082.259974][T21172] R10: ffff888060cb6328 R11: 0000000000003dd8 R12: 0000000000000000 [ 2082.268227][T21172] R13: 00000000abcd0100 R14: 0000000000000000 R15: 0000000000000000 [ 2082.276431][T21172] FS: 0000000000000000(0000) GS:ffff8881aa95a000(0000) knlGS:0000000000000000 [ 2082.285626][T21172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2082.292481][T21172] CR2: 000000110c36e800 CR3: 0000000060b2c000 CR4: 00000000003526f0 [ 2082.301247][T21172] Call Trace: [ 2082.304640][T21172] [ 2082.308044][T21172] kmsan_print_origin+0xb0/0x340 [ 2082.313232][T21172] ? stack_trace_print+0xbd/0xf0 [ 2082.318597][T21172] kmsan_report+0x1d3/0x320 [ 2082.323325][T21172] ? __msan_warning+0x1b/0x30 [ 2082.328346][T21172] ? get_temp_cnct+0x1df/0x3b0 [ 2082.333319][T21172] ? ccp_probe+0x458/0x790 [ 2082.338072][T21172] ? hid_device_probe+0x536/0xab0 [ 2082.343323][T21172] ? really_probe+0x4d1/0xd90 [ 2082.348377][T21172] ? __driver_probe_device+0x268/0x380 [ 2082.354071][T21172] ? driver_probe_device+0x70/0x8b0 [ 2082.359723][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2082.365499][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2082.370894][T21172] ? __device_attach+0x3c8/0x5c0 [ 2082.376052][T21172] ? device_initial_probe+0x33/0x40 [ 2082.381717][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2082.386945][T21172] ? device_add+0x12a9/0x1c10 [ 2082.391990][T21172] ? hid_add_device+0x5ed/0x7b0 [ 2082.397058][T21172] ? usbhid_probe+0x1fec/0x2660 [ 2082.402244][T21172] ? usb_probe_interface+0xd01/0x1310 [ 2082.407934][T21172] ? really_probe+0x4d1/0xd90 [ 2082.412843][T21172] ? __driver_probe_device+0x268/0x380 [ 2082.418752][T21172] ? driver_probe_device+0x70/0x8b0 [ 2082.424173][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2082.430347][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2082.435801][T21172] ? __device_attach+0x3c8/0x5c0 [ 2082.441077][T21172] ? device_initial_probe+0x33/0x40 [ 2082.446485][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2082.451916][T21172] ? device_add+0x12a9/0x1c10 [ 2082.456803][T21172] ? usb_set_configuration+0x3493/0x3b70 [ 2082.462782][T21172] ? usb_generic_driver_probe+0xfc/0x290 [ 2082.468794][T21172] ? usb_probe_device+0x38d/0x690 [ 2082.473984][T21172] ? really_probe+0x4d1/0xd90 [ 2082.479025][T21172] ? __driver_probe_device+0x268/0x380 [ 2082.484716][T21172] ? driver_probe_device+0x70/0x8b0 [ 2082.490307][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2082.496072][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2082.501394][T21172] ? __device_attach+0x3c8/0x5c0 [ 2082.506536][T21172] ? device_initial_probe+0x33/0x40 [ 2082.512195][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2082.517529][T21172] ? device_add+0x12a9/0x1c10 [ 2082.522403][T21172] ? usb_new_device+0x104b/0x20c0 [ 2082.527818][T21172] ? hub_event+0x5588/0x7580 [ 2082.532621][T21172] ? process_scheduled_works+0xb91/0x1d80 [ 2082.538756][T21172] ? worker_thread+0xedf/0x1590 [ 2082.543828][T21172] ? kthread+0xd59/0xf00 [ 2082.548583][T21172] ? ret_from_fork+0x1e0/0x310 [ 2082.553734][T21172] ? ret_from_fork_asm+0x1a/0x30 [ 2082.559022][T21172] ? ret_from_fork_asm+0x1a/0x30 [ 2082.564186][T21172] ? irqentry_enter+0x2e/0x50 [ 2082.569282][T21172] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 2082.575334][T21172] __msan_warning+0x1b/0x30 [ 2082.580167][T21172] get_temp_cnct+0x1df/0x3b0 [ 2082.584978][T21172] ccp_probe+0x458/0x790 [ 2082.589544][T21172] ? __pfx_ccp_probe+0x10/0x10 [ 2082.594505][T21172] hid_device_probe+0x536/0xab0 [ 2082.599743][T21172] ? __pfx_hid_device_probe+0x10/0x10 [ 2082.605320][T21172] really_probe+0x4d1/0xd90 [ 2082.610201][T21172] __driver_probe_device+0x268/0x380 [ 2082.615728][T21172] driver_probe_device+0x70/0x8b0 [ 2082.621100][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2082.626426][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2082.632653][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.638367][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.643420][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2082.649705][T21172] __device_attach+0x3c8/0x5c0 [ 2082.654689][T21172] device_initial_probe+0x33/0x40 [ 2082.660037][T21172] bus_probe_device+0x3ba/0x5e0 [ 2082.665109][T21172] device_add+0x12a9/0x1c10 [ 2082.670231][T21172] hid_add_device+0x5ed/0x7b0 [ 2082.675348][T21172] usbhid_probe+0x1fec/0x2660 [ 2082.680388][T21172] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2082.686701][T21172] ? __pfx_usbhid_probe+0x10/0x10 [ 2082.692349][T21172] usb_probe_interface+0xd01/0x1310 [ 2082.698756][T21172] ? __pfx_usb_probe_interface+0x10/0x10 [ 2082.704571][T21172] really_probe+0x4d1/0xd90 [ 2082.709447][T21172] __driver_probe_device+0x268/0x380 [ 2082.714965][T21172] driver_probe_device+0x70/0x8b0 [ 2082.720385][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2082.725709][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2082.731897][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.737632][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.742669][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2082.748958][T21172] __device_attach+0x3c8/0x5c0 [ 2082.753956][T21172] device_initial_probe+0x33/0x40 [ 2082.759365][T21172] bus_probe_device+0x3ba/0x5e0 [ 2082.764414][T21172] device_add+0x12a9/0x1c10 [ 2082.769292][T21172] usb_set_configuration+0x3493/0x3b70 [ 2082.775078][T21172] usb_generic_driver_probe+0xfc/0x290 [ 2082.781032][T21172] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2082.787348][T21172] usb_probe_device+0x38d/0x690 [ 2082.792922][T21172] ? __pfx_usb_probe_device+0x10/0x10 [ 2082.798601][T21172] really_probe+0x4d1/0xd90 [ 2082.803340][T21172] __driver_probe_device+0x268/0x380 [ 2082.809013][T21172] driver_probe_device+0x70/0x8b0 [ 2082.814262][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2082.819734][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2082.825770][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.831512][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.836545][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2082.842894][T21172] __device_attach+0x3c8/0x5c0 [ 2082.848053][T21172] device_initial_probe+0x33/0x40 [ 2082.853290][T21172] bus_probe_device+0x3ba/0x5e0 [ 2082.858472][T21172] device_add+0x12a9/0x1c10 [ 2082.863198][T21172] usb_new_device+0x104b/0x20c0 [ 2082.868462][T21172] hub_event+0x5588/0x7580 [ 2082.873151][T21172] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 2082.879092][T21172] ? __pfx_hub_event+0x10/0x10 [ 2082.884062][T21172] process_scheduled_works+0xb91/0x1d80 [ 2082.890016][T21172] worker_thread+0xedf/0x1590 [ 2082.894970][T21172] kthread+0xd59/0xf00 [ 2082.899648][T21172] ? __pfx_worker_thread+0x10/0x10 [ 2082.905002][T21172] ? __pfx_kthread+0x10/0x10 [ 2082.910122][T21172] ret_from_fork+0x1e0/0x310 [ 2082.915120][T21172] ? __pfx_kthread+0x10/0x10 [ 2082.920021][T21172] ret_from_fork_asm+0x1a/0x30 [ 2082.925036][T21172] [ 2082.928398][T21172] ---[ end trace 0000000000000000 ]--- [ 2082.933967][T21172] [ 2082.936390][T21172] Uninit was created at: [ 2082.941078][T21172] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 2082.947902][T21172] devm_kmalloc+0xd7/0x2f0 [ 2082.952581][T21172] ccp_probe+0x114/0x790 [ 2082.957015][T21172] hid_device_probe+0x536/0xab0 [ 2082.962222][T21172] really_probe+0x4d1/0xd90 [ 2082.966932][T21172] __driver_probe_device+0x268/0x380 [ 2082.972569][T21172] driver_probe_device+0x70/0x8b0 [ 2082.977923][T21172] __device_attach_driver+0x4ee/0x950 [ 2082.983519][T21172] bus_for_each_drv+0x3e0/0x680 [ 2082.988859][T21172] __device_attach+0x3c8/0x5c0 [ 2082.993828][T21172] device_initial_probe+0x33/0x40 [ 2082.999187][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.004232][T21172] device_add+0x12a9/0x1c10 [ 2083.009093][T21172] hid_add_device+0x5ed/0x7b0 [ 2083.013966][T21172] usbhid_probe+0x1fec/0x2660 [ 2083.019146][T21172] usb_probe_interface+0xd01/0x1310 [ 2083.024516][T21172] really_probe+0x4d1/0xd90 [ 2083.029628][T21172] __driver_probe_device+0x268/0x380 [ 2083.035349][T21172] driver_probe_device+0x70/0x8b0 [ 2083.040694][T21172] __device_attach_driver+0x4ee/0x950 [ 2083.046278][T21172] bus_for_each_drv+0x3e0/0x680 [ 2083.051431][T21172] __device_attach+0x3c8/0x5c0 [ 2083.056391][T21172] device_initial_probe+0x33/0x40 [ 2083.061756][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.066795][T21172] device_add+0x12a9/0x1c10 [ 2083.071633][T21172] usb_set_configuration+0x3493/0x3b70 [ 2083.077333][T21172] usb_generic_driver_probe+0xfc/0x290 [ 2083.083301][T21172] usb_probe_device+0x38d/0x690 [ 2083.088479][T21172] really_probe+0x4d1/0xd90 [ 2083.093243][T21172] __driver_probe_device+0x268/0x380 [ 2083.098917][T21172] driver_probe_device+0x70/0x8b0 [ 2083.104221][T21172] __device_attach_driver+0x4ee/0x950 [ 2083.110010][T21172] bus_for_each_drv+0x3e0/0x680 [ 2083.115095][T21172] __device_attach+0x3c8/0x5c0 [ 2083.120234][T21172] device_initial_probe+0x33/0x40 [ 2083.125520][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.130715][T21172] device_add+0x12a9/0x1c10 [ 2083.135464][T21172] usb_new_device+0x104b/0x20c0 [ 2083.140978][T21172] hub_event+0x5588/0x7580 [ 2083.145660][T21172] process_scheduled_works+0xb91/0x1d80 [ 2083.151829][T21172] worker_thread+0xedf/0x1590 [ 2083.157007][T21172] kthread+0xd59/0xf00 [ 2083.161405][T21172] ret_from_fork+0x1e0/0x310 [ 2083.166200][T21172] ret_from_fork_asm+0x1a/0x30 [ 2083.171456][T21172] [ 2083.173957][T21172] CPU: 1 UID: 0 PID: 21172 Comm: kworker/1:9 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 2083.186331][T21172] Tainted: [W]=WARN [ 2083.190409][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2083.200802][T21172] Workqueue: usb_hub_wq hub_event [ 2083.206107][T21172] ===================================================== [ 2083.213329][T21172] Disabling lock debugging due to kernel taint [ 2083.219774][T21172] Kernel panic - not syncing: kmsan.panic set ... [ 2083.226365][T21172] CPU: 1 UID: 0 PID: 21172 Comm: kworker/1:9 Tainted: G B W 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 2083.238614][T21172] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2083.243777][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2083.254060][T21172] Workqueue: usb_hub_wq hub_event [ 2083.259386][T21172] Call Trace: [ 2083.262812][T21172] [ 2083.265873][T21172] __dump_stack+0x26/0x30 [ 2083.270556][T21172] dump_stack_lvl+0x53/0x270 [ 2083.275424][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2083.281537][T21172] dump_stack+0x1e/0x25 [ 2083.285930][T21172] panic+0x4bd/0xd50 [ 2083.290126][T21172] kmsan_report+0x31c/0x320 [ 2083.294918][T21172] ? __msan_warning+0x1b/0x30 [ 2083.299845][T21172] ? get_temp_cnct+0x1df/0x3b0 [ 2083.304856][T21172] ? ccp_probe+0x458/0x790 [ 2083.309494][T21172] ? hid_device_probe+0x536/0xab0 [ 2083.314783][T21172] ? really_probe+0x4d1/0xd90 [ 2083.319721][T21172] ? __driver_probe_device+0x268/0x380 [ 2083.325481][T21172] ? driver_probe_device+0x70/0x8b0 [ 2083.330962][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2083.336798][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2083.342034][T21172] ? __device_attach+0x3c8/0x5c0 [ 2083.347262][T21172] ? device_initial_probe+0x33/0x40 [ 2083.352739][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2083.357978][T21172] ? device_add+0x12a9/0x1c10 [ 2083.362895][T21172] ? hid_add_device+0x5ed/0x7b0 [ 2083.367997][T21172] ? usbhid_probe+0x1fec/0x2660 [ 2083.373134][T21172] ? usb_probe_interface+0xd01/0x1310 [ 2083.378719][T21172] ? really_probe+0x4d1/0xd90 [ 2083.383694][T21172] ? __driver_probe_device+0x268/0x380 [ 2083.389438][T21172] ? driver_probe_device+0x70/0x8b0 [ 2083.394913][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2083.400746][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2083.406007][T21172] ? __device_attach+0x3c8/0x5c0 [ 2083.411193][T21172] ? device_initial_probe+0x33/0x40 [ 2083.416679][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2083.421940][T21172] ? device_add+0x12a9/0x1c10 [ 2083.426882][T21172] ? usb_set_configuration+0x3493/0x3b70 [ 2083.432811][T21172] ? usb_generic_driver_probe+0xfc/0x290 [ 2083.438749][T21172] ? usb_probe_device+0x38d/0x690 [ 2083.443991][T21172] ? really_probe+0x4d1/0xd90 [ 2083.448924][T21172] ? __driver_probe_device+0x268/0x380 [ 2083.454690][T21172] ? driver_probe_device+0x70/0x8b0 [ 2083.460184][T21172] ? __device_attach_driver+0x4ee/0x950 [ 2083.466021][T21172] ? bus_for_each_drv+0x3e0/0x680 [ 2083.471303][T21172] ? __device_attach+0x3c8/0x5c0 [ 2083.476484][T21172] ? device_initial_probe+0x33/0x40 [ 2083.481968][T21172] ? bus_probe_device+0x3ba/0x5e0 [ 2083.487230][T21172] ? device_add+0x12a9/0x1c10 [ 2083.492163][T21172] ? usb_new_device+0x104b/0x20c0 [ 2083.497455][T21172] ? hub_event+0x5588/0x7580 [ 2083.502320][T21172] ? process_scheduled_works+0xb91/0x1d80 [ 2083.508333][T21172] ? worker_thread+0xedf/0x1590 [ 2083.513457][T21172] ? kthread+0xd59/0xf00 [ 2083.517946][T21172] ? ret_from_fork+0x1e0/0x310 [ 2083.522936][T21172] ? ret_from_fork_asm+0x1a/0x30 [ 2083.528116][T21172] ? ret_from_fork_asm+0x1a/0x30 [ 2083.533272][T21172] ? irqentry_enter+0x2e/0x50 [ 2083.538159][T21172] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 2083.544209][T21172] __msan_warning+0x1b/0x30 [ 2083.548913][T21172] get_temp_cnct+0x1df/0x3b0 [ 2083.553732][T21172] ccp_probe+0x458/0x790 [ 2083.558184][T21172] ? __pfx_ccp_probe+0x10/0x10 [ 2083.563144][T21172] hid_device_probe+0x536/0xab0 [ 2083.568226][T21172] ? __pfx_hid_device_probe+0x10/0x10 [ 2083.573801][T21172] really_probe+0x4d1/0xd90 [ 2083.578555][T21172] __driver_probe_device+0x268/0x380 [ 2083.584068][T21172] driver_probe_device+0x70/0x8b0 [ 2083.589316][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2083.594649][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2083.600682][T21172] __device_attach_driver+0x4ee/0x950 [ 2083.606303][T21172] bus_for_each_drv+0x3e0/0x680 [ 2083.611340][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2083.617486][T21172] __device_attach+0x3c8/0x5c0 [ 2083.622476][T21172] device_initial_probe+0x33/0x40 [ 2083.627699][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.632738][T21172] device_add+0x12a9/0x1c10 [ 2083.637444][T21172] hid_add_device+0x5ed/0x7b0 [ 2083.642317][T21172] usbhid_probe+0x1fec/0x2660 [ 2083.647187][T21172] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2083.653471][T21172] ? __pfx_usbhid_probe+0x10/0x10 [ 2083.658696][T21172] usb_probe_interface+0xd01/0x1310 [ 2083.664080][T21172] ? __pfx_usb_probe_interface+0x10/0x10 [ 2083.669868][T21172] really_probe+0x4d1/0xd90 [ 2083.674583][T21172] __driver_probe_device+0x268/0x380 [ 2083.680073][T21172] driver_probe_device+0x70/0x8b0 [ 2083.685290][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2083.690595][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2083.696604][T21172] __device_attach_driver+0x4ee/0x950 [ 2083.702188][T21172] bus_for_each_drv+0x3e0/0x680 [ 2083.707200][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2083.713314][T21172] __device_attach+0x3c8/0x5c0 [ 2083.718275][T21172] device_initial_probe+0x33/0x40 [ 2083.723488][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.728513][T21172] device_add+0x12a9/0x1c10 [ 2083.733214][T21172] usb_set_configuration+0x3493/0x3b70 [ 2083.738963][T21172] usb_generic_driver_probe+0xfc/0x290 [ 2083.744625][T21172] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2083.750889][T21172] usb_probe_device+0x38d/0x690 [ 2083.755902][T21172] ? __pfx_usb_probe_device+0x10/0x10 [ 2083.761428][T21172] really_probe+0x4d1/0xd90 [ 2083.766136][T21172] __driver_probe_device+0x268/0x380 [ 2083.771621][T21172] driver_probe_device+0x70/0x8b0 [ 2083.776834][T21172] ? kmsan_get_metadata+0xfb/0x160 [ 2083.782145][T21172] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2083.788154][T21172] __device_attach_driver+0x4ee/0x950 [ 2083.793741][T21172] bus_for_each_drv+0x3e0/0x680 [ 2083.798751][T21172] ? __pfx___device_attach_driver+0x10/0x10 [ 2083.804865][T21172] __device_attach+0x3c8/0x5c0 [ 2083.809831][T21172] device_initial_probe+0x33/0x40 [ 2083.815053][T21172] bus_probe_device+0x3ba/0x5e0 [ 2083.820076][T21172] device_add+0x12a9/0x1c10 [ 2083.824775][T21172] usb_new_device+0x104b/0x20c0 [ 2083.829837][T21172] hub_event+0x5588/0x7580 [ 2083.834501][T21172] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 2083.840273][T21172] ? __pfx_hub_event+0x10/0x10 [ 2083.845225][T21172] process_scheduled_works+0xb91/0x1d80 [ 2083.851023][T21172] worker_thread+0xedf/0x1590 [ 2083.855933][T21172] kthread+0xd59/0xf00 [ 2083.860144][T21172] ? __pfx_worker_thread+0x10/0x10 [ 2083.865464][T21172] ? __pfx_kthread+0x10/0x10 [ 2083.870211][T21172] ret_from_fork+0x1e0/0x310 [ 2083.874956][T21172] ? __pfx_kthread+0x10/0x10 [ 2083.879696][T21172] ret_from_fork_asm+0x1a/0x30 [ 2083.884675][T21172] [ 2083.888066][T21172] Kernel Offset: disabled [ 2083.892457][T21172] Rebooting in 86400 seconds..