last executing test programs: 1m29.969701806s ago: executing program 2 (id=4148): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") 1m28.874601711s ago: executing program 2 (id=4151): r0 = io_uring_setup(0x57a3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x4000, 0x1e4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.559975565s ago: executing program 2 (id=4155): socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m27.681779057s ago: executing program 2 (id=4159): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r3, &(0x7f0000001040), 0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) recvmmsg(r4, &(0x7f00000015c0)=[{{&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=""/213, 0xd5}, 0x80}, {{&(0x7f0000001040)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001480)=[{&(0x7f00000010c0)=""/40, 0x28}, {&(0x7f0000001100)=""/129, 0x81}, {&(0x7f00000011c0)=""/173, 0xad}, {&(0x7f0000001280)=""/37, 0x25}, {&(0x7f00000012c0)=""/163, 0xa3}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000001380)=""/202, 0xca}], 0x7, &(0x7f0000001500)=""/172, 0xac}, 0xffffff01}], 0x2, 0x10021, 0x0) 1m26.269121765s ago: executing program 2 (id=4162): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x8f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004240)='devpts\x00', 0x2000480, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x104) setpgid(r0, 0x0) setpgid(0x0, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m26.010977638s ago: executing program 2 (id=4164): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r4 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setreuid(0x0, 0xee01) socket$netlink(0x10, 0x3, 0x4) 1m10.922300018s ago: executing program 32 (id=4164): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r4 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setreuid(0x0, 0xee01) socket$netlink(0x10, 0x3, 0x4) 12.208963178s ago: executing program 1 (id=4471): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 9.388905945s ago: executing program 3 (id=4479): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d35", 0xe}], 0x3, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000084530000b86fc3beaa0cc53bd44e58fcf310903987151636f214d953a729f98abf029ff7a7f2874cb4b2d692cc65435c379e500e9f95e87714337b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbc) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x10, 0x0, 0xfb, 0xbf, 0x6}, 0x18, &(0x7f0000000080)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0xf00, 0x9}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "c33c1a68913fa1775f78020e1dcdb681042c4366ad28348470aeaa9bf5494e4cd035d9d29200f6925cfcdcec5ef743e146d51c58e822364a0b947b832e4e3572e387d175d21c46d896d361687505ec485535a950"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}]}) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x814) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x80) 8.942899871s ago: executing program 1 (id=4480): socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8.041662522s ago: executing program 5 (id=4484): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7, 0x1, 0x7, 0xe, 0x3}) 7.935810234s ago: executing program 1 (id=4485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 7.703867187s ago: executing program 3 (id=4486): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') close(0x3) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf3200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) add_key(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) 7.50721784s ago: executing program 0 (id=4487): r0 = io_uring_setup(0x57a3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x4000, 0x1e4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) close_range(r0, 0xffffffffffffffff, 0x0) 7.105396405s ago: executing program 0 (id=4490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x15, 0x0) unshare(0x600) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000180)='./file2\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x4, 0xd9c, &(0x7f0000001dc0)="$eJzs3ctvXNX9APBzx544L35xiPnFTdPYJaW4j9gkWKW7GildoEqoEn8BSgMNNfQRugAFKWHRbSMh/oAiuu6izyyQIlap2LTqP4BYdZMiJNpGlcCV7XPG429memcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux9ri4OF2l9Patty7emxn/9+qUmVaO2bXH8Ty2lFJqtuZLaTIsb2liPf3sk2uX2tPPc1qlC6lKVWt6evZua94jKaXraTbdTpPpuY9P3nzpg2eW3ztx48TFN+bu7EzrAQBgtNz73rs//fPj3712/D+/ObOUJlrTy/b5Uh4/mrf7l6r18Zy0/gdUbWnVNl4cCPnG89AI+cY65GsvpxnyjXcp/0BYbrNLvoma8sfapnVqNwyzjf/xVWN+03ijMT+//p981YdjB6r5V64sv3B1QBUFtt2nM3kXn8FgGLlh5dig10AA6+Jxw/tcj3sWHkxraeO9lX/36Ubn+WEb7PbnX/nDVf67N6xx2D779dNU2lW+R0fzeDyOMB7m6/f7X5YXj0c0e6xnt+MIw3J8oVs9x3a5HlvVrf7xc7FffSmn5XU4E+Lt35/4ng7Lewx0ds/+f4NhZIeVQa+AgD0rnje3kpV4PK8vxidq4gdr4odq4odr4kdq4jDKfvvqL9PNauN/fvxP3+/+sLKf7aGc/l+f9Yn7I/stP573268HLT+eTwx72ty/Tn/689t/ief/fx7O/z+bf0sn8wqi7C+M+9Vb5/6HC4MbXfI9HKrzUIf8a8+nNuerpjaWk9rWM/fVY3rzfMe65Tu9Od9kyHc4b4scDPWN2yeHw3xl+6OsV8vrNR7a2wztOBDqUd6Z4zk9GNpzvFu7wo7sAyFfMw8nQrumQrseCfP9f2hXNb25XXH/eanPyTA9Hicp+cLbdt/vUnwv4nUZj+b0zZy+k9P3c/pRh3JHUfk8djv/v3w+p1OzeuHK8uUn8nj5nN4Za06sTj+/y/UGHlyv1/9Mp83X/xxtTW822tcLxzamV+3rhckw/UKX6U/m8fJ79sOxQ2vT5y/9ePkH2914GHFXX3v9R88vL1/+mSeeeOJJ68mg10zATlt49eWfLFx97fVzV15+/sXLL15+5fwT3/7Wk089tbiwtlW/0L5tD+wvGz/6g64JAAAAAAAAAAAA0LPqUOfJOa27v225nrxcnx6vj2c4lPetfBrKfQzK9Z/d7utSrt88vgt1ZPvtxuVEg24j0Nk/3P/XYBjZYWXFXfyBvWHQ/f+V+x6W9Oi5vx1fHUq2u09vXl/G+xfCg9jr/c8pf3/1/9fq/6rn9V/oMWtya+X+7t6hv7YVm071Wn5sf7kP7FR/5f8+l19a81jqrfyVX4Xy441Ke/SHUP7hHsu/r/2nt1b+H3P55WWbO9tr+es1rhqb6xH3G5f7AMb9xsWfQvvLvf36bv8WO2q7lcuHUTYs/Uz2a1j6/+ymLLesB/PquXWcrtx/O/Z30G/9y32/y+/AI2H5Vc3vm/4/h1td/5/l87eg/0/Ydz50/M9gGNlhZWVloF2fjGq/K3vFoF//QW9DDrr8Qb/+dWL/n/H/Uuz/M8Zj/58xHvv/jPHYv1aMx/4/4+sZ+/+M8ZNhubF/0Oma+Bdq4qdq4l+siZ+uiV/59f+Oz9bMf6YmPlMTf7gm/mhN/GxN/Cs18cdq4o/XxOdq4vvdl3M6qu2HURb7jfT9h9FRjv90+/5P1cSB4RX7dY7f76/WxIHhVc7z8P2GEVR1vmNH3N9e9uO+mdN3cvp+Tj/asQqyG76W06/n9Bs5/WZOz+V0PqcLOdU35HD7xd9PnblZbZzndyzEez2fNF4PEO8Tc77H+sTjc/2ez3qyx3J2qvwtXg4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQaa4+Li9NVSm/feuviP6e+8/3VKTOtHLNrj+N5bCml1EwpVXl8PCzv+sR6+tkn1y51Sqt0Ye2xjKdn77bmPbI6f5pNt9Nkeu7jkzdf+uCZ5fdO3Dhx8Y25OzvTegAAABgN/w0AAP//Wabmsg==") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004", @ANYRES8=r0, @ANYRESHEX=r0], 0x328}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 6.863585788s ago: executing program 1 (id=4491): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 6.603284902s ago: executing program 0 (id=4492): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0xe4, 0x2d, 0x20, 0x5fc9, 0x63, 0x3048, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd5, 0xaf, 0x53, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x400, 0x0) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 6.179209268s ago: executing program 4 (id=4493): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) socket$inet(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) pipe2(&(0x7f0000000140), 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x17, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 5.930987111s ago: executing program 4 (id=4494): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 5.821515862s ago: executing program 5 (id=4495): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x4a0582) syz_usb_disconnect(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x13) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 5.735640393s ago: executing program 4 (id=4496): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)="e76bb8ccb6cd8249c73ee42e386c48fc4932fd2224ba4ab02a8728b4bed9f375037e2d6d004ba01f5e0e471e145f8c37ff95cdb3278c92d8d3bdfad3b76c0ee0aa31a4ebfa5e4b9fbdf6c716b4b9b4820f92313f88af0c2fab9f3e361f2463a597f909545c532a46903c15d2f8ebfdd404aafad2fb19640d7f5df6da84079e905bb3865b9f2364c8046bb8723c7b41b32a101ad289ff450830a3", 0x9a}, {&(0x7f00000002c0)="985163b9eef7abcd8aad7fb30d35", 0xe}], 0x3, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000084530000b86fc3beaa0cc53bd44e58fcf310903987151636f214d953a729f98abf029ff7a7f2874cb4b2d692cc65435c379e500e9f95e87714337b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbc) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x10, 0x0, 0xfb, 0xbf, 0x6}, 0x18, &(0x7f0000000080)={0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x3, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x2, 0xf00, 0x9}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x422}}, {0x56, &(0x7f0000000340)=@string={0x56, 0x3, "c33c1a68913fa1775f78020e1dcdb681042c4366ad28348470aeaa9bf5494e4cd035d9d29200f6925cfcdcec5ef743e146d51c58e822364a0b947b832e4e3572e387d175d21c46d896d361687505ec485535a950"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}]}) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x814) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x80) 4.802418075s ago: executing program 0 (id=4497): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32c\x00'}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0}) 4.755551696s ago: executing program 5 (id=4498): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}], 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}], 0x10) 4.594093478s ago: executing program 5 (id=4499): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 4.43113766s ago: executing program 3 (id=4500): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file1\x00', 0x208000, &(0x7f0000001d40)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e800c324c19bad386d9a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e01000000943549e2c2e191b7da91b8645dfdb324ceaf445cdc974884e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8e3abf802401b0e8382824a68cf51cde62ac99470edf8c757396564c8079d89017df3182005ec9fe433b122f1c02ca72eb68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad838a9744100d520765c83c0178534e09d2f578bd10d3bfc68d1e75d6965613448d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda7ff84c57d63da96f044f8daaac7cb7132ef6"], 0x1, 0x5e62, &(0x7f0000011a80)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x5422) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) creat(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 4.327535312s ago: executing program 4 (id=4501): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x20, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000000080)={0x20, 0x4, 0xa5, {0xa5, 0x5, "5798201043a6c056e1ce1390d620edcbd1964607dc58e256eb80414555db9662f321cbe8c6b4caec81358cafc345182f6c2d96a9a9d42e67b8e03d24cef548f44368d02ad5d6eb61b0502925ead3efc76e77c5f30d30ebe55797c8fd06fd52bc8da3c0090c1ad70a9297a2f3758ccb7fc5ae689096f8b2be9bf0ba755e8f284776608253f8a03558d669318313db5dc974edacc44efca00cc7b93fe0eb7c41f5de8737"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0xfb, 0x5, "b2e0bbc4", "a87cdce7"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x8, 0x5, 0x0, 0x2, 0x3}}}, &(0x7f0000000740)={0x44, &(0x7f0000000280)={0x0, 0x8, 0x32, "caaebffd68696c04313b5faa6ade84bd41de4efd4f07e4b98b55d082e19bf2128f025e428c84a0f02fd0e3d96d8a0e09ee8d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5f}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x3c0, 0x88, [0xf0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "abf0"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="af858427c89e"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @random="505dd90c15df"}, &(0x7f0000000600)={0x40, 0x19, 0x2, "b1ec"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3e) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x4, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4.209772794s ago: executing program 5 (id=4502): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4182) 3.765584919s ago: executing program 1 (id=4503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) 3.137735578s ago: executing program 3 (id=4504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40881) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffebf, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840006e, 0x0, 0xfd78, 0xfffffffffffffd0a, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x8, 0x3, 0x28b}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x7, 0xfffffffffffffffd, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.713827073s ago: executing program 1 (id=4505): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 2.404960807s ago: executing program 5 (id=4506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r2 = inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe) ioctl$FIONREAD(r3, 0x80047456, &(0x7f0000002300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x4c, 0x7, 0x1, 0x0, "84c0f38dc95fd2da9e262640e93bd749895a940000b9748f13d31f00638657caa888f071a0f72708f214784cda43aafa9ed72aa651f8f1c937c95645409b3562fa0f11cd7a0ce125"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x214, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x101, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x46, 0x6, "ede05af4d64f0b1c7e5bdd15287fb172b1a15f48bef4bc05fa4c3bb3600928ac208ab466b1a08f7031cb482d92fb29afebfe7fb27dc15635c157330bd187e0dce88e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "1c6233d807c50bb621e31bbb75459c615a17e43971494855a904b33e7c1882cbb4e806d979b677d4a13aafd737d81f780e71b8c80309a659bdfe1eb3afcd0863859c4eaa3949746c1629891bfa05802f17c1a83fd91bd6dd1823be2b29820c7013c362eceaaa5bdeb9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc4b7cde}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3907fc23}]}, @NFTA_CHAIN_HOOK={0xa0, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}]}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4b0}, 0x1, 0x0, 0x0, 0x40001}, 0x4000840) close(r2) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65", 0x24, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, r5, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x100, 0x8, 0x36b}, 0x10) 1.018301876s ago: executing program 0 (id=4507): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000b40)='./file1\x00', 0x4c44, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRES32, @ANYRES64], 0xfe, 0xc1a, &(0x7f0000007e80)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+9fOnMc+lRtwIA2E9Xxr965qznPwB8olz1//8AAAAAAAAAAAAAAHDQpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78l54fvtDND67/sD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbceeA+7rb/dUHUC6jdfuzV9/fpi/eyz57Zsvj34Xv9jJwcvDj99+qlu2YmR0dHxnjK1vo989Lvca4TH0SjidKR45ns/Sc2IKGL35+I+3529dqzqxFDViYmR0aojM+3m7FK5cax7IoqIek+lRvcc7cO12JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13727viiiFim+c2I9XYuII93z8MVqYPC921HsYR8fQNnOel/ESnEIrtkB1h9FvBIpfvp2EVPlOcs/8YWIV8r8QcSbZb4YkcovxvmId3f4HnE41aKIvyiv/8X1NF3dD7r3lctfq39l9vpcT9nufeXQPx/20wG/Nw1EEc3qjr+ePvpvdgAAAAAAAAAAAAAAAAB42I5FEU9Gipf/44+qccVRjUs/cXH49wd/sXfM+BP32U9Z9tmIWC4ebEzu0TyEeCyNpfSIxxJ/kg1EEX+cx/9961E3BgAAAAAAAAAAAAAAAAAA4BOtiB9HihfeOZVWondO8fbsjfrV5rWZzqyw3bl/u3Omb2xsbNRTJxs5J3Mu51zJuZpzLWcUuX7ORs7JnMs5V3Ku5lzLGUdy/ZyNnJM5l3Ou5FzNuZYzarl+zkbOyZzLOVdyruZcyxkHZO5eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICPkyKKeD9SfPsb6ylSRDQiJqOTq/3dMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAo9Sfivh+pKj/QePOulpEpOrfjlPlL+ejcbTMT0djuMwXo3EpZ7PKWuNbj6D97E5fKuJHkaJ/4K07Fzxf/77Opztfg3jzm5uffqXWySPdjYPv9T928sTF4dFfe+Jey2mnBgxdbs/eul2fGBkdHe9ZXctH/3TPusF83OLhdJ2IWHz9jdeaMzOtBQufjIVaZ6EWB6Q9+7WQ71dxUNqzfaFxMJqxufCIb0zsi/L5/26k+O13/rP7wO8+/3+h8+nOEz5+9iebz/8Xtu9oj57/j/eseyH/bqSvFjGwdHO+72TEwOLrb5xu32zeaN1ozZ4/c+bLw8NfPnem72jEwPX2TKtnadenCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxuxqvNXhx+OnTTx2JI9V4qy3jtl4dv3qp/tLczfmF1uJia7o+MduemptuPejhBqrhXhMjo3vSmfs6tsftPzbw0tz86wvtG3+4tOP24wOXri0uLTSndt4cx6KIaPSuGaoaPDEyWjV6pt2craqO7TiY7sPrS0X8V6SYOl9Pn8/r8vi/7SP8t4z/X96+oz0a//epnnXlMVMq4meR4rf+8on4fNXO43HXOcvl/jZSDF34XC4XR8ty3TZ03ivQGRlYlv2/SPGP728t2x0P+fhm2ece+MQeEuX1PxEpvv/n341fz+u2vv9h5+t/fPuO9uj6f6Zn3fEt7yvYddfJ1/90pHjx8bfiN/K6D3r/RxEbGxt/GnEqF77zfo49uv6f7Vk3GJ3j/ubD6z4AAAAAAAAAAMCh1ZeK+LtI8dRoLT2f1z3I3/+b3r6jPfr7X7/cs256n+Yr2jzi0Y9+YgEAAADgAOhLRfw4UtxYeuvOGOqt4797xn/+zubc6yNp29bqz/l+qXpvwMP8879eg/m4k7vvNgAAAAAAAAAAAAAAAAAAABwoKRXxfJ5PffI+86mvRoqX/+eZXC6dLMt154EfrH4duDI3e/rSzMzcVHOpeW2mVR+fb061yrqfiRTrf/O5XLeo5lfvzjffmeN9YKM7F/tCpBj9+27Zzlzs3bnJO/OBd+ZiL8t+KlL89z9sLdudx/qzm2XPlmX/OlJ8/Z93Lntys+y5sux3I8UPv17vlj1elu2+H7XzTtKBWsy0np2am7nrVagAAAAAAAAAAAAAAAAAAADwYfWlIv4sUvzvzZVYzsP+8/z/3Rn4a92yb36zZ77/bW5X8/wPVvP/32v5o8z/P/jQegoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIdHiiLeiBTzV9bTan/5uWPgcnv21u2JkdGdqx1LVc0jVfnyZ+C5s+fOf+n54Qvd/OD6D9uT8er41Uv1l+Zuzi+0Fhdb0/WJ2fbU3HTrgfew2/qbp65jqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c4+odq3KajUcRfRYpnvveT9C/9EUXs/lzc57uz145VnRiqOjExMlp1ZKbdnF0qN451T0QRUe+p1Oieo324FrvSiFgum182eKjs3vh8c6F5baZVH2suLLWX2nOzY6nT2rI/9SjiQopYiYi1/rt31xdFvBYpvnNiPf1rf8SR7nn44pXxr545e+92FHvYxwdQtrPeF7FSHIJrdoD1RxH/FCl++vap+Lf+iFp0fuILEa+U+YOIN8t8MSKVX4zzEe/u8D3icKpFEf9fXv+L6+nt/vJ+0L2vXP5a/Suz1+d6ynbvK4f++bCfDvi9aSCK+GF1x19P/+6/awAAAAAAAAAAAAAAAIADpIhfjRQvvHMqVeOD74wpbs/eqF9tXpvpDOvrjv3rjpne2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7I2D0AAAAAAAAAAAAAAAAAAODjpaj+SfHtb6ynjf7O/NKT0clV84F+7P08AAD//076/RE=") symlink(&(0x7f0000000940)='./bus\x00', &(0x7f00000009c0)='./file0\x00') mknod$loop(&(0x7f00000017c0)='./bus\x00', 0x40, 0x0) creat(&(0x7f00000007c0)='./file0\x00', 0x11c) 665.803561ms ago: executing program 3 (id=4508): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="18002d8004"], 0x34}, 0x1, 0x0, 0x0, 0x20008414}, 0x40000) 384.722314ms ago: executing program 4 (id=4509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) 278.965546ms ago: executing program 3 (id=4510): syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x4}}, 0x20}}, 0x4000041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 83.877968ms ago: executing program 4 (id=4511): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 0s ago: executing program 0 (id=4512): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x4000000000000000, 0x4}) kernel console output (not intermixed with test programs): 3694][ T4297] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 667.512002][ T4299] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 667.555712][ T4255] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 667.588467][ T4299] aqc111 1-1:1.242 eth1: register 'aqc111' at usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller, 66:fc:e1:de:66:57 [ 667.604453][ T4255] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 667.641752][ T4255] asix: probe of 4-1:0.0 failed with error -71 [ 667.678964][ T4299] usb 1-1: USB disconnect, device number 77 [ 667.683910][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 667.685736][ T4255] usb 4-1: USB disconnect, device number 72 [ 667.700667][ T4299] aqc111 1-1:1.242 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller [ 667.707252][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.782954][ T4297] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 667.800347][T15825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.810369][T15825] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 667.833869][ T4299] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 667.843399][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.866123][T15825] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 667.875790][T15825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 667.881412][ T4299] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 667.882827][ T4297] usb 5-1: Product: syz [ 667.882846][ T4297] usb 5-1: Manufacturer: syz [ 667.911943][ T4299] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 667.921531][T15825] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 667.921657][T15825] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 667.942104][T15825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 667.949547][ T4297] usb 5-1: SerialNumber: syz [ 667.964390][T15825] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 667.975245][ T4297] usb 5-1: config 0 descriptor?? [ 667.981073][T15825] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 667.991298][T15825] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 668.001911][T15825] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 668.008131][T15825] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 668.017931][T15825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.025781][T15825] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 668.031762][T15825] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 668.933656][ T4297] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 669.013723][ T22] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 669.067679][ T952] usb 5-1: USB disconnect, device number 43 [ 669.143703][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 669.151142][ T4297] usb 3-1: config 0 has no interfaces? [ 669.177678][ T4297] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 669.213696][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 669.222061][ T22] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 669.248622][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.283966][ T22] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 669.324315][ T4297] usb 3-1: config 0 descriptor?? [ 669.356255][ T22] usb 4-1: config 250 has no interfaces? [ 669.402723][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 669.443460][ T22] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 669.463772][ T22] usb 4-1: Product: syz [ 669.468258][ T22] usb 4-1: SerialNumber: syz [ 669.559819][T15846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.590354][T15846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.668977][ T22] usb 3-1: USB disconnect, device number 83 [ 669.843751][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 669.914365][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.003753][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.009827][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.084271][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.269458][T15865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.288233][T15865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.613850][ T22] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 670.823674][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 670.830972][ T22] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 670.861560][ T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 670.901756][ T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 670.945276][ T22] usb 5-1: config 250 has no interface number 0 [ 670.990379][ T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 671.009411][ T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 671.021724][ T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 671.042593][ T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 671.054051][ T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 671.068016][ T22] usb 5-1: config 250 interface 228 has no altsetting 0 [ 671.083696][ T22] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 671.093103][ T22] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 671.112900][ T22] usb 5-1: Product: syz [ 671.127737][ T22] usb 5-1: SerialNumber: syz [ 671.171558][ T22] hub 5-1:250.228: bad descriptor, ignoring hub [ 671.190598][ T22] hub: probe of 5-1:250.228 failed with error -5 [ 671.358327][ T22] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 671.714265][ C1] usblp0: nonzero read bulk status received: -71 [ 671.721161][ T952] usb 4-1: USB disconnect, device number 73 [ 671.923679][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 672.003763][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 672.032205][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3979'. [ 672.073718][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 672.079771][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 672.108266][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3979'. [ 672.153675][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 672.363905][ T22] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 672.544280][ T952] usb 5-1: USB disconnect, device number 44 [ 672.569627][ T952] usblp0: removed [ 672.613782][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 672.636091][ T22] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 672.660697][ T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.672207][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.682930][ T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.693646][ T22] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.720478][ T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 672.730762][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.746182][T15909] syz.1.3978 (15909): drop_caches: 2 [ 672.784128][T15909] syz.1.3978 (15909): drop_caches: 2 [ 672.966800][ T22] usb 4-1: GET_CAPABILITIES returned 0 [ 672.972346][ T22] usbtmc 4-1:16.0: can't read capabilities [ 673.153758][ T952] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 673.356961][ T952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 673.392264][ T952] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 673.441675][ T952] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 673.480568][ T952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.530254][ T952] usb 1-1: Product: syz [ 673.552903][ T952] usb 1-1: Manufacturer: syz [ 673.578568][ T952] usb 1-1: SerialNumber: syz [ 674.078741][ T952] usb 1-1: config 0 descriptor?? [ 674.094996][ T22] usb 4-1: USB disconnect, device number 74 [ 674.103379][T15933] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 674.130952][ T952] usb 1-1: ucan: probing device on interface #0 [ 674.140971][ T952] usb 1-1: ucan: invalid EP count (1) [ 674.165399][ T952] usb 1-1: ucan: probe failed; try to update the device firmware [ 674.540940][T15933] fuse: Bad value for 'fd' [ 674.963787][ T22] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 675.163844][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 675.172468][ T22] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 675.190874][ T22] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 675.203853][ T22] usb 3-1: config 250 has no interfaces? [ 675.212069][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 675.222176][ T22] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 675.230931][ T22] usb 3-1: Product: syz [ 675.235486][ T22] usb 3-1: SerialNumber: syz [ 676.020751][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.035985][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.243642][ T4255] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 676.361119][ T4299] usb 1-1: USB disconnect, device number 78 [ 676.443663][ T4255] usb 5-1: Using ep0 maxpacket: 16 [ 676.452196][ T4255] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 676.482219][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.510506][ T4255] usb 5-1: Product: syz [ 676.529517][ T4255] usb 5-1: Manufacturer: syz [ 676.545428][ T4255] usb 5-1: SerialNumber: syz [ 676.784342][T15973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.833997][T15973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.941155][ T4255] snd-usb-audio: probe of 5-1:222.0 failed with error -71 [ 676.991463][ T4255] usb 5-1: USB disconnect, device number 45 [ 677.052617][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.580355][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 677.648925][ T22] usb 3-1: USB disconnect, device number 84 [ 677.873767][T15994] input: syz0 as /devices/virtual/input/input18 [ 678.242527][T15977] syz.3.3997 (15977): drop_caches: 1 [ 678.260079][T15978] syz.3.3997 (15978): drop_caches: 1 [ 678.914031][ T7] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 679.103799][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 679.112202][ T7] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 679.170433][ T7] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 679.189673][ T7] usb 3-1: config 250 has no interfaces? [ 679.198182][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 679.231202][ T7] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 679.256948][ T7] usb 3-1: Product: syz [ 679.272340][ T7] usb 3-1: SerialNumber: syz [ 679.364373][ T4297] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 679.578041][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 679.587109][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 679.640581][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.710004][ T4297] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 679.770063][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.817374][ T4297] usb 4-1: config 0 descriptor?? [ 679.961212][T16041] syz.0.4024 (16041): drop_caches: 1 [ 680.013043][T16044] syz.0.4024 (16044): drop_caches: 1 [ 680.060464][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.074663][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.405157][T16041] syz.0.4024 (16041): drop_caches: 1 [ 681.173651][ T7] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 681.365565][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.393052][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 681.449088][ T7] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 681.496217][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.536632][ T7] usb 1-1: Product: syz [ 681.556637][ T7] usb 1-1: Manufacturer: syz [ 681.581771][ T7] usb 1-1: SerialNumber: syz [ 681.611001][ T7] usb 1-1: config 0 descriptor?? [ 681.645190][ T22] usb 3-1: USB disconnect, device number 85 [ 681.667626][ T7] powermate: probe of 1-1:0.0 failed with error -22 [ 682.161757][ T4297] usbhid 4-1:0.0: can't add hid device: -71 [ 682.168284][ T4297] usbhid: probe of 4-1:0.0 failed with error -71 [ 682.187354][ T4297] usb 4-1: USB disconnect, device number 75 [ 684.432322][ T22] usb 1-1: USB disconnect, device number 79 [ 684.628825][T16103] loop2: detected capacity change from 0 to 256 [ 684.758693][T16108] loop3: detected capacity change from 0 to 512 [ 684.884193][T16108] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 684.914264][ T22] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 685.023417][T16108] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 685.054089][ T4297] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 685.098441][T16108] EXT4-fs (loop3): 1 truncate cleaned up [ 685.115385][T16108] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 685.163691][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 685.192361][ T22] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 685.223756][ T22] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 685.270809][ T22] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 685.299427][T12866] EXT4-fs (loop3): unmounting filesystem. [ 685.309025][ T4297] usb 5-1: config 0 has no interfaces? [ 685.322505][ T4297] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 685.364176][ T22] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 685.379690][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.415965][ T22] usb 1-1: config 250 has no interface number 0 [ 685.425132][ T4297] usb 5-1: Product: syz [ 685.442710][ T4297] usb 5-1: Manufacturer: syz [ 685.447742][ T22] usb 1-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 685.479459][ T4297] usb 5-1: SerialNumber: syz [ 685.505062][ T4297] usb 5-1: config 0 descriptor?? [ 685.519932][ T22] usb 1-1: config 250 interface 228 has no altsetting 0 [ 685.547209][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 685.566489][ T22] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 685.588119][ T22] usb 1-1: Product: syz [ 685.603131][ T22] usb 1-1: SerialNumber: syz [ 685.635945][ T22] hub 1-1:250.228: bad descriptor, ignoring hub [ 685.660605][ T22] hub: probe of 1-1:250.228 failed with error -5 [ 685.675447][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.681820][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.387044][T16128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.447278][T16131] [U] „ [ 687.254091][T16128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.346183][T16136] loop1: detected capacity change from 0 to 1024 [ 688.463716][ T22] usb 1-1: USB disconnect, device number 80 [ 688.613949][ T4330] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 688.819745][ T4330] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 688.846465][ T4330] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 688.947507][ T4330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 688.957193][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 688.969392][ T4330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 688.990499][ T4330] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.028013][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.063036][ T4330] usb 2-1: Product: syz [ 689.107194][ T4330] usb 2-1: Manufacturer: syz [ 689.161629][ T4330] cdc_wdm 2-1:1.0: skipping garbage [ 689.198731][ T4330] cdc_wdm 2-1:1.0: skipping garbage [ 689.242962][ T4330] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 689.281648][ T4330] cdc_wdm 2-1:1.0: Unknown control protocol [ 689.902965][ T952] usb 5-1: USB disconnect, device number 46 [ 690.760076][T16147] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.023693][ T4255] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 692.433910][ T4330] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 693.066710][ T4255] usb 4-1: config 0 has no interfaces? [ 693.080754][ T22] usb 2-1: USB disconnect, device number 73 [ 693.142978][ T4255] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 693.162234][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.204199][ T4255] usb 4-1: Product: syz [ 693.213050][ T4255] usb 4-1: Manufacturer: syz [ 693.219715][ T4255] usb 4-1: SerialNumber: syz [ 693.273929][ T4330] usb 1-1: Using ep0 maxpacket: 32 [ 693.275621][ T4255] usb 4-1: config 0 descriptor?? [ 693.281264][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 693.353714][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.396238][ T4330] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 693.460144][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.487713][ T4330] usb 1-1: config 0 descriptor?? [ 694.166017][T16215] loop2: detected capacity change from 0 to 512 [ 694.175120][T16213] loop1: detected capacity change from 0 to 1024 [ 694.419303][ T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 694.429935][T16215] EXT4-fs (loop2): 1 orphan inode deleted [ 694.455968][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 694.488050][T16215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 694.552314][T16215] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.760821][T16215] EXT4-fs (loop2): shut down requested (1) [ 694.895853][T12349] EXT4-fs (loop2): unmounting filesystem. [ 694.906224][ T4318] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 695.076036][ T4330] usbhid 1-1:0.0: can't add hid device: -71 [ 695.082211][ T4330] usbhid: probe of 1-1:0.0 failed with error -71 [ 695.127908][T16226] loop1: detected capacity change from 0 to 512 [ 695.135128][T16226] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.141564][T16226] EXT4-fs: inline encryption not supported [ 695.147532][T16226] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.166682][ T4330] usb 1-1: USB disconnect, device number 81 [ 695.182907][T16226] EXT4-fs (loop1): Test dummy encryption mode enabled [ 695.189795][T16226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 696.109066][T16226] EXT4-fs (loop1): 1 truncate cleaned up [ 696.114994][T16226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 696.287994][T16237] loop4: detected capacity change from 0 to 256 [ 696.374670][T16237] exfat: Unknown parameter 'zero_size_dir' [ 697.070069][ T4245] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 697.118442][T12722] EXT4-fs (loop1): unmounting filesystem. [ 698.147215][T16251] loop2: detected capacity change from 0 to 128 [ 698.218463][T16251] hpfs: bad mount options. [ 698.279214][T16235] loop0: detected capacity change from 0 to 32768 [ 698.527987][T16235] (syz.0.4083,16235,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 698.573018][T16235] (syz.0.4083,16235,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 699.234481][T16249] loop1: detected capacity change from 0 to 32768 [ 699.403659][ T4330] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 699.523943][ T4301] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 699.603052][ T22] usb 4-1: USB disconnect, device number 76 [ 699.623677][ T4330] usb 5-1: Using ep0 maxpacket: 8 [ 699.630076][T16249] MetaData crosses page boundary!! [ 699.630838][ T4330] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 699.643681][T16249] lblock = 66f862, size = 45056 [ 699.653971][T16249] CPU: 0 PID: 16249 Comm: syz.1.4086 Not tainted 6.1.139-syzkaller #0 [ 699.662167][T16249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 699.672263][T16249] Call Trace: [ 699.675571][T16249] [ 699.676429][ T4330] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 699.678516][T16249] dump_stack_lvl+0x168/0x22e [ 699.691643][T16249] ? __wake_up_bit+0x1e0/0x1e0 [ 699.696452][T16249] ? show_regs_print_info+0x12/0x12 [ 699.697347][ T4330] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 699.701679][T16249] ? load_image+0x3b0/0x3b0 [ 699.716463][T16249] ? folio_unlock+0x114/0x2e0 [ 699.721195][T16249] __get_metapage+0xaa8/0xfa0 [ 699.725916][T16249] dtSearch+0x5d5/0x2050 [ 699.730226][T16249] jfs_lookup+0x152/0x380 [ 699.734605][T16249] ? jfs_get_parent+0xa0/0xa0 [ 699.739320][T16249] ? d_alloc_parallel+0x136f/0x1480 [ 699.742562][ T4330] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 699.744554][T16249] ? lockdep_softirqs_off+0x420/0x420 [ 699.744589][T16249] ? d_hash_and_lookup+0x1b0/0x1b0 [ 699.764152][T16249] ? __init_waitqueue_head+0xa5/0x150 [ 699.769570][T16249] __lookup_slow+0x27d/0x3a0 [ 699.773761][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 699.774181][T16249] ? lookup_one_len+0x2c0/0x2c0 [ 699.779743][ T4330] usb 5-1: config 250 has no interface number 0 [ 699.784127][T16249] ? try_to_unlazy+0x34c/0x5a0 [ 699.784165][T16249] ? preempt_count_add+0x8d/0x190 [ 699.784190][T16249] ? down_read+0x1a8/0x2d0 [ 699.784218][T16249] lookup_slow+0x53/0x70 [ 699.784244][T16249] walk_component+0x2be/0x3f0 [ 699.791718][ T4301] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 699.795328][T16249] ? path_lookupat+0x15c/0x440 [ 699.795359][T16249] path_lookupat+0x169/0x440 [ 699.795387][T16249] filename_lookup+0x1f0/0x500 [ 699.795415][T16249] ? hashlen_string+0x110/0x110 [ 699.795458][T16249] ? strncpy_from_user+0x1e3/0x350 [ 699.795494][T16249] ? getname_flags+0x206/0x500 [ 699.795527][T16249] user_path_at_empty+0x3e/0x60 [ 699.795553][T16249] __se_sys_mount+0x297/0x3c0 [ 699.801887][ T4330] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 699.804999][T16249] ? __x64_sys_mount+0xc0/0xc0 [ 699.805036][T16249] ? lockdep_hardirqs_on+0x94/0x140 [ 699.809267][ T4330] usb 5-1: config 250 interface 228 has no altsetting 0 [ 699.813926][T16249] ? __x64_sys_mount+0x1c/0xc0 [ 699.813958][T16249] do_syscall_64+0x4c/0xa0 [ 699.813986][T16249] ? clear_bhb_loop+0x60/0xb0 [ 699.814007][T16249] ? clear_bhb_loop+0x60/0xb0 [ 699.814030][T16249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.814063][T16249] RIP: 0033:0x7f66da78e969 [ 699.814093][T16249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.814119][T16249] RSP: 002b:00007f66db6e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 699.814148][T16249] RAX: ffffffffffffffda RBX: 00007f66da9b5fa0 RCX: 00007f66da78e969 [ 699.814165][T16249] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 699.814180][T16249] RBP: 00007f66da810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 699.814194][T16249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.814207][T16249] R13: 0000000000000000 R14: 00007f66da9b5fa0 R15: 00007fff81d4a858 [ 699.814239][T16249] [ 699.851140][T16254] loop2: detected capacity change from 0 to 32768 [ 699.879724][ T4301] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 700.028495][ T4301] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 700.040263][ T4301] usb 1-1: config 250 has no interface number 0 [ 700.050050][ T4330] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 700.060456][ T4301] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 700.072732][T16249] bread failed! [ 700.076732][T16249] jfs_lookup: dtSearch returned -5 [ 700.083052][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 700.104983][ T4330] usb 5-1: Product: syz [ 700.109201][ T4330] usb 5-1: SerialNumber: syz [ 700.115722][ T4301] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 700.135792][ T4301] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 700.153777][ T4330] hub 5-1:250.228: bad descriptor, ignoring hub [ 700.160119][ T4330] hub: probe of 5-1:250.228 failed with error -5 [ 700.213642][ T4301] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 700.275074][ T4301] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 700.323853][ T4301] usb 1-1: config 250 interface 228 has no altsetting 0 [ 700.349727][ T4301] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 700.383040][ T4301] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 700.403611][ T4301] usb 1-1: Product: syz [ 700.407829][ T4301] usb 1-1: SerialNumber: syz [ 700.476959][ T4301] hub 1-1:250.228: bad descriptor, ignoring hub [ 700.483283][ T4301] hub: probe of 1-1:250.228 failed with error -5 [ 700.678143][ T4301] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 82 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 700.771689][T16270] loop3: detected capacity change from 0 to 512 [ 700.802582][T16270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 700.841814][T16270] EXT4-fs (loop3): 1 truncate cleaned up [ 700.851576][ C0] usblp0: nonzero read bulk status received: -71 [ 700.871219][T16270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 700.989430][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.011012][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.022336][T12866] EXT4-fs (loop3): unmounting filesystem. [ 701.086761][ T4301] usb 1-1: USB disconnect, device number 82 [ 701.443923][ T4255] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 701.640958][ T4255] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 701.714249][ T4255] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 702.642677][ T4255] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 702.651923][ T4255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 702.719354][ T4255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 702.896216][ T4255] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 702.973754][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 702.981639][T16269] usblp0: removed [ 703.021412][ T4255] usb 2-1: Product: syz [ 703.034927][ T4255] usb 2-1: Manufacturer: syz [ 703.041303][ T4297] usb 5-1: USB disconnect, device number 47 [ 703.090919][ T4255] cdc_wdm 2-1:1.0: skipping garbage [ 703.303864][ T4255] cdc_wdm 2-1:1.0: skipping garbage [ 703.335481][ T4255] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 703.342280][T16278] loop1: detected capacity change from 0 to 1024 [ 703.359282][ T4255] cdc_wdm 2-1:1.0: Unknown control protocol [ 703.383907][T16278] hfsplus: failed to load catalog file [ 703.497414][T16304] loop3: detected capacity change from 0 to 512 [ 703.565041][T16304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 703.683822][T16304] EXT4-fs (loop3): 1 truncate cleaned up [ 703.727046][T16304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 703.748170][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 703.754804][ T4297] usb 2-1: USB disconnect, device number 74 [ 703.757020][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 703.767604][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 703.773698][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 703.865750][T12866] EXT4-fs (loop3): unmounting filesystem. [ 704.309381][T16302] syz.2.4103 (16302): drop_caches: 1 [ 704.913986][ T4301] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 705.028763][T16329] loop3: detected capacity change from 0 to 4096 [ 705.114050][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 705.121227][ T4301] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 705.162958][T16329] NILFS (loop3): invalid segment: Checksum error in segment payload [ 705.193095][T16329] NILFS (loop3): trying rollback from an earlier position [ 705.193340][ T4301] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 705.271297][ T4301] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 705.332392][ T4301] usb 2-1: config 250 has no interface number 0 [ 705.338940][T16329] NILFS (loop3): recovery complete [ 705.373013][ T4301] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 705.398642][T16338] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.443718][ T4301] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 705.496962][ T4301] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 705.544304][ T4301] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 705.571378][ T4301] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 705.607921][ T4301] usb 2-1: config 250 interface 228 has no altsetting 0 [ 705.642697][ T4301] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 705.733995][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 705.754460][ T4301] usb 2-1: Product: syz [ 705.761229][ T4301] usb 2-1: SerialNumber: syz [ 705.839663][ T4301] hub 2-1:250.228: bad descriptor, ignoring hub [ 705.847241][ T4301] hub: probe of 2-1:250.228 failed with error -5 [ 706.074618][ T4301] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 75 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 706.573901][ T4255] usb 2-1: USB disconnect, device number 75 [ 706.583395][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 706.654515][ T4255] usblp0: removed [ 706.659758][T16334] loop4: detected capacity change from 0 to 32768 [ 706.661765][T16353] loop0: detected capacity change from 0 to 512 [ 706.755842][T16353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 706.799219][T16353] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.266741][T11866] EXT4-fs (loop0): unmounting filesystem. [ 707.383742][ T4299] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 708.395986][ T4299] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.413664][ T4299] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 708.454795][ T4299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.497038][ T4299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 708.520874][ T4299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 708.558779][ T4299] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.606930][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.630553][ T4299] usb 3-1: Product: syz [ 708.642673][ T4299] usb 3-1: Manufacturer: syz [ 708.715369][ T4299] cdc_wdm 3-1:1.0: skipping garbage [ 708.720637][ T4299] cdc_wdm 3-1:1.0: skipping garbage [ 708.816070][ T4299] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 708.822035][ T4299] cdc_wdm 3-1:1.0: Unknown control protocol [ 710.870820][T16398] loop4: detected capacity change from 0 to 1024 [ 711.065373][T16398] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4134'. [ 712.969527][ T4255] usb 3-1: USB disconnect, device number 86 [ 713.033261][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 713.050311][T16410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 713.057643][T16410] IPv6: NLM_F_CREATE should be set when creating new route [ 713.116150][T16414] netlink: 'syz.1.4139': attribute type 39 has an invalid length. [ 713.318773][ T952] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 713.753781][ T952] usb 1-1: Using ep0 maxpacket: 8 [ 713.760956][ T952] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 713.790229][ T952] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 713.855700][ T952] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 713.889955][ T952] usb 1-1: config 250 has no interface number 0 [ 713.904176][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 713.916798][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 713.927675][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 713.939767][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 713.958684][ T952] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 713.980083][ T952] usb 1-1: config 250 interface 228 has no altsetting 0 [ 713.987051][T16424] loop4: detected capacity change from 0 to 2048 [ 714.022428][ T952] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 714.041179][ T952] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 714.143472][ T952] usb 1-1: Product: syz [ 714.215094][T16424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 714.225759][T16424] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.233699][ T952] usb 1-1: SerialNumber: syz [ 714.284511][ T952] hub 1-1:250.228: bad descriptor, ignoring hub [ 714.407863][ T952] hub: probe of 1-1:250.228 failed with error -5 [ 714.484278][ T952] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 83 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 714.534299][ T26] audit: type=1800 audit(1747640678.348:372): pid=16434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4144" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 715.743890][ T952] usb 1-1: USB disconnect, device number 83 [ 715.819128][ T952] usblp0: removed [ 716.470765][T16420] loop3: detected capacity change from 0 to 32768 [ 716.481987][T16446] loop2: detected capacity change from 0 to 256 [ 716.551522][T16446] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 717.462954][T13222] EXT4-fs (loop4): unmounting filesystem. [ 717.696788][T16457] loop0: detected capacity change from 0 to 512 [ 717.856382][T16457] EXT4-fs (loop0): 1 orphan inode deleted [ 717.862195][T16457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 717.873861][ T33] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 717.892384][T16467] loop4: detected capacity change from 0 to 64 [ 717.907189][ T33] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:2: Failed to release dquot type 1 [ 717.987957][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4155'. [ 718.010086][T16457] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.351488][T11866] EXT4-fs (loop0): unmounting filesystem. [ 718.663939][T16438] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 718.854484][T16438] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 718.860572][T16479] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.903845][ T952] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 719.074441][ T7] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 719.103852][ T952] usb 1-1: Using ep0 maxpacket: 8 [ 719.116037][ T952] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 719.160799][ T952] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 719.212808][ T952] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 719.268935][ T952] usb 1-1: config 250 has no interface number 0 [ 719.283690][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 719.300345][ T7] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 719.340193][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 719.366806][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.449683][ T7] usb 2-1: Product: syz [ 719.459001][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 719.504523][ T7] usb 2-1: Manufacturer: syz [ 719.546647][ T7] usb 2-1: SerialNumber: syz [ 719.571707][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 719.661800][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 719.737899][ T952] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 719.917432][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.922138][ T952] usb 1-1: config 250 interface 228 has no altsetting 0 [ 719.927751][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.944750][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.953886][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.963018][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.974376][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.994552][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.996064][ T7] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 720.012359][ T952] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 720.021686][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.042304][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.049206][ T952] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 720.064934][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.092398][ T7] usb 2-1: USB disconnect, device number 76 [ 720.103918][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.123599][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.123670][ T952] usb 1-1: Product: syz [ 720.140071][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.148468][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.174254][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.175530][ T952] usb 1-1: SerialNumber: syz [ 720.209865][ T952] hub 1-1:250.228: bad descriptor, ignoring hub [ 720.214635][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.229839][ T952] hub: probe of 1-1:250.228 failed with error -5 [ 720.258359][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.277662][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.303110][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.321350][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.336646][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.348562][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.373245][T16438] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 720.382781][T16438] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 720.394051][T16438] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.404988][T16438] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 720.411841][ T952] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 84 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 720.423605][T16438] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 720.458833][T16438] usb 5-1: Product: syz [ 720.463066][T16438] usb 5-1: Manufacturer: syz [ 720.494083][T16438] usb 5-1: SerialNumber: syz [ 720.521496][T16438] usb 5-1: config 0 descriptor?? [ 720.555192][T16438] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 720.753150][ C0] usblp0: nonzero read bulk status received: -71 [ 721.139437][ T952] usb 5-1: USB disconnect, device number 48 [ 721.232687][ T952] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 721.435989][ T4255] usb 1-1: USB disconnect, device number 84 [ 721.452635][ T4255] usblp0: removed [ 721.707779][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4170'. [ 721.854830][T16519] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 721.883708][T16519] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 723.252955][ T26] audit: type=1326 audit(1747640687.078:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 723.333396][ T26] audit: type=1326 audit(1747640687.078:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 723.445142][ T26] audit: type=1326 audit(1747640687.078:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 723.754860][ T26] audit: type=1326 audit(1747640687.078:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.024951][ T26] audit: type=1326 audit(1747640687.078:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.134333][ T26] audit: type=1326 audit(1747640687.108:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.449339][ T26] audit: type=1326 audit(1747640687.108:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.531497][ T26] audit: type=1326 audit(1747640687.108:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.578308][ T26] audit: type=1326 audit(1747640687.108:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 724.629087][ T26] audit: type=1326 audit(1747640687.108:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.4.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb087b2ab39 code=0x7ffc0000 [ 725.913879][ T4255] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 726.103662][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 726.116275][ T4255] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 726.141941][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.150937][ T4255] usb 1-1: Product: syz [ 726.155460][ T4255] usb 1-1: Manufacturer: syz [ 726.160091][ T4255] usb 1-1: SerialNumber: syz [ 726.223691][T14118] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 726.411423][ T4255] snd-usb-audio: probe of 1-1:222.0 failed with error -71 [ 726.434288][T14118] usb 4-1: Using ep0 maxpacket: 8 [ 726.452450][T14118] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 726.464183][ T4255] usb 1-1: USB disconnect, device number 85 [ 726.470091][T14118] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 726.470119][T14118] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 726.494522][T14118] usb 4-1: config 250 has no interface number 0 [ 726.496710][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.504599][T14118] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 726.534902][T14118] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 726.552013][T14118] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 726.571119][T14118] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 726.583198][T14118] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 726.603476][T14118] usb 4-1: config 250 interface 228 has no altsetting 0 [ 726.619425][T14118] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 726.630160][T14118] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 726.647117][T14118] usb 4-1: Product: syz [ 726.652657][T14118] usb 4-1: SerialNumber: syz [ 726.671114][T14118] hub 4-1:250.228: bad descriptor, ignoring hub [ 726.682569][T14118] hub: probe of 4-1:250.228 failed with error -5 [ 727.073397][T14118] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 77 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 727.115352][T14118] usb 4-1: USB disconnect, device number 77 [ 727.126968][T14118] usblp0: removed [ 727.303826][ T4255] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 727.376235][T16567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4186'. [ 727.493890][ T4255] usb 1-1: Using ep0 maxpacket: 8 [ 727.501936][ T4255] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 727.534368][ T4255] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 727.561386][ T4255] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 727.581602][ T4255] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 727.623608][ T4255] usb 1-1: config 250 has no interface number 0 [ 727.630002][ T4255] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 727.643583][ T4255] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 727.654424][ T4255] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 727.668499][ T4255] usb 1-1: config 250 interface 228 has no altsetting 0 [ 727.696141][ T4255] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 727.713459][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 727.763600][ T4255] usb 1-1: Product: syz [ 727.767829][ T4255] usb 1-1: SerialNumber: syz [ 727.816145][ T4255] hub 1-1:250.228: bad descriptor, ignoring hub [ 727.822465][ T4255] hub: probe of 1-1:250.228 failed with error -5 [ 729.018533][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.045024][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.311252][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4197'. [ 729.384039][T16438] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 729.583971][T16438] usb 2-1: Using ep0 maxpacket: 16 [ 729.597272][T16438] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 729.606697][T16438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.616519][T16438] usb 2-1: Product: syz [ 729.620965][T16438] usb 2-1: Manufacturer: syz [ 729.626411][T16438] usb 2-1: SerialNumber: syz [ 729.881269][T16438] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 729.911536][T16438] usb 2-1: USB disconnect, device number 77 [ 730.175171][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.193980][ T4255] usb 1-1: USB disconnect, device number 86 [ 730.593691][ T952] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 730.731405][T16611] loop1: detected capacity change from 0 to 32768 [ 730.783913][ T952] usb 1-1: Using ep0 maxpacket: 8 [ 730.790997][ T952] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 730.810511][ T952] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 730.820047][ T952] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 730.829912][ T952] usb 1-1: config 250 has no interface number 0 [ 730.836602][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 730.849617][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 730.861399][ T952] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 730.881057][ T952] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 730.892400][ T952] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 730.913273][ T952] usb 1-1: config 250 interface 228 has no altsetting 0 [ 730.963991][ T952] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 730.979186][ T952] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 730.998102][ T952] usb 1-1: Product: syz [ 731.002318][ T952] usb 1-1: SerialNumber: syz [ 731.041686][ T952] hub 1-1:250.228: bad descriptor, ignoring hub [ 731.068249][ T952] hub: probe of 1-1:250.228 failed with error -5 [ 731.353926][T16438] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 731.559281][ T952] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 87 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 731.584727][T16438] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.602405][T16438] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.626086][T16438] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 731.642755][T16438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.673721][T16438] usb 5-1: Product: syz [ 731.678010][T16438] usb 5-1: Manufacturer: syz [ 731.679209][ T952] usb 1-1: USB disconnect, device number 87 [ 731.682697][T16438] usb 5-1: SerialNumber: syz [ 731.713338][T16438] usb 5-1: config 0 descriptor?? [ 731.741403][T16438] powermate: probe of 5-1:0.0 failed with error -22 [ 731.829388][ T952] usblp0: removed [ 732.158576][T16628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4210'. [ 732.207618][T16631] loop0: detected capacity change from 0 to 512 [ 732.224475][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4210'. [ 732.266687][T16631] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4209: casefold flag without casefold feature [ 732.310253][T16631] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4209: couldn't read orphan inode 15 (err -117) [ 732.330040][T16631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 732.372420][T16631] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.4209: Directory hole found for htree leaf block 0 [ 732.503131][T11866] EXT4-fs (loop0): unmounting filesystem. [ 732.928696][T16652] loop3: detected capacity change from 0 to 512 [ 732.971638][T16652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 733.017256][T16652] EXT4-fs (loop3): 1 truncate cleaned up [ 733.030105][T16652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 733.190434][T16648] syz.0.4212 (16648): drop_caches: 1 [ 733.197457][T12866] EXT4-fs (loop3): unmounting filesystem. [ 733.268847][T16645] syz.0.4212 (16645): drop_caches: 1 [ 733.737770][T16645] syz.0.4212 (16645): drop_caches: 1 [ 734.111244][T16438] usb 5-1: USB disconnect, device number 49 [ 734.163770][ T7] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 734.257651][T16674] loop4: detected capacity change from 0 to 512 [ 734.312002][T16674] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 734.353830][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 734.360906][ T7] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 734.399289][ T7] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 734.437871][ T7] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 734.472053][ T7] usb 1-1: config 250 has no interface number 0 [ 734.492943][ T7] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 734.524194][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 734.547677][ T7] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 734.559774][ T7] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 734.571038][ T7] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 734.587369][ T7] usb 1-1: config 250 interface 228 has no altsetting 0 [ 734.597075][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 734.606900][ T7] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 734.617052][ T7] usb 1-1: Product: syz [ 734.621308][ T7] usb 1-1: SerialNumber: syz [ 734.639653][ T7] hub 1-1:250.228: bad descriptor, ignoring hub [ 734.650388][ T7] hub: probe of 1-1:250.228 failed with error -5 [ 734.866303][T16688] loop1: detected capacity change from 0 to 256 [ 734.925309][T16438] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 734.993446][T16688] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 735.044852][ T7] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 88 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 735.117369][ T7] usb 1-1: USB disconnect, device number 88 [ 735.124032][T16438] usb 4-1: Using ep0 maxpacket: 32 [ 735.135795][T16438] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.140814][ T7] usblp0: removed [ 735.169136][T16438] usb 4-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.178035][T16692] netlink: 'syz.4.4229': attribute type 39 has an invalid length. [ 735.217592][T16438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 735.258548][T16438] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 735.278002][T16438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.308229][T16438] usb 4-1: config 0 descriptor?? [ 735.731069][T16438] usbhid 4-1:0.0: can't add hid device: -71 [ 735.740800][T16438] usbhid: probe of 4-1:0.0 failed with error -71 [ 735.793414][T16438] usb 4-1: USB disconnect, device number 78 [ 736.123701][ T7] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 736.316459][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.337466][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.380139][ T7] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 736.403722][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.424650][ T7] usb 1-1: Product: syz [ 736.428882][ T7] usb 1-1: Manufacturer: syz [ 736.449580][ T7] usb 1-1: SerialNumber: syz [ 736.493686][ T7] usb 1-1: config 0 descriptor?? [ 736.513714][ T7] powermate: probe of 1-1:0.0 failed with error -22 [ 736.537727][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 736.548195][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 736.561180][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 736.569339][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 736.581333][ T4269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 736.594343][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 736.753633][ T952] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 736.963635][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 737.003629][ T952] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 737.012763][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.074276][ T952] usb 2-1: Product: syz [ 737.078511][ T952] usb 2-1: Manufacturer: syz [ 737.083139][ T952] usb 2-1: SerialNumber: syz [ 737.340413][ T952] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 737.391546][ T952] usb 2-1: USB disconnect, device number 78 [ 737.617145][T16702] chnl_net:caif_netlink_parms(): no params data found [ 737.645248][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.761568][T16724] netlink: 'syz.3.4240': attribute type 39 has an invalid length. [ 738.277332][T16702] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.302335][T16702] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.333223][T16702] device bridge_slave_0 entered promiscuous mode [ 738.401508][T16702] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.412322][T16702] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.440326][T16702] device bridge_slave_1 entered promiscuous mode [ 738.617284][T16702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.634721][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 738.650088][T16702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.907338][T16738] loop3: detected capacity change from 0 to 32768 [ 738.952744][T16702] team0: Port device team_slave_0 added [ 738.970467][ T4255] usb 1-1: USB disconnect, device number 89 [ 738.979514][T16702] team0: Port device team_slave_1 added [ 739.236268][T16702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.243299][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.319183][T16702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.677246][T16702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.713639][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.776480][T16702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.989460][T16702] device hsr_slave_0 entered promiscuous mode [ 741.029035][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 741.063974][T16702] device hsr_slave_1 entered promiscuous mode [ 741.310914][T16247] device hsr_slave_0 left promiscuous mode [ 741.443804][T16438] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 741.633723][T16438] usb 1-1: Using ep0 maxpacket: 32 [ 741.641570][T16438] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 741.660942][T16438] usb 1-1: config 0 has no interface number 0 [ 741.683005][T16438] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 741.717428][T16438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.734861][T16438] usb 1-1: Product: syz [ 741.743860][T16438] usb 1-1: Manufacturer: syz [ 741.761025][T16438] usb 1-1: SerialNumber: syz [ 741.782281][T16438] usb 1-1: config 0 descriptor?? [ 741.809615][T16438] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 743.464044][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 743.879107][T16438] gspca_topro: reg_r err -71 [ 743.889874][T16438] gspca_topro: Sensor soi763a [ 743.949822][T16438] usb 1-1: USB disconnect, device number 90 [ 744.540531][T16817] loop0: detected capacity change from 0 to 64 [ 745.521513][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 747.116271][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.122727][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.368918][T16247] bond0 (unregistering): Released all slaves [ 747.424253][ T14] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 747.617790][T16848] loop3: detected capacity change from 0 to 64 [ 747.626589][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.673843][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 747.759907][ T14] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 747.781992][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.801394][T16851] netlink: 'syz.1.4276': attribute type 39 has an invalid length. [ 747.810437][ T14] usb 1-1: Product: syz [ 747.819692][ T14] usb 1-1: Manufacturer: syz [ 747.824665][ T14] usb 1-1: SerialNumber: syz [ 747.879831][ T14] usb 1-1: config 0 descriptor?? [ 747.885009][ T7] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 747.924047][ T14] powermate: probe of 1-1:0.0 failed with error -22 [ 748.036469][T16702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 748.084584][T16857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4278'. [ 748.094151][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 748.101534][ T7] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 748.104521][T16702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 748.130249][ T7] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 748.136070][T16702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 748.160200][ T7] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 748.188248][ T7] usb 5-1: config 250 has no interface number 0 [ 748.206677][ T7] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 748.216596][T16702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 748.242930][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'. [ 748.247960][ T7] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 748.297950][ T7] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 748.344989][ T7] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 748.377369][ T7] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 748.420627][ T7] usb 5-1: config 250 interface 228 has no altsetting 0 [ 748.449382][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 748.470804][T16702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.479537][ T7] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 748.517444][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.541012][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.545860][ T7] usb 5-1: Product: syz [ 748.553041][ T7] usb 5-1: SerialNumber: syz [ 748.563032][T16702] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.614788][ T7] hub 5-1:250.228: bad descriptor, ignoring hub [ 748.621109][ T7] hub: probe of 5-1:250.228 failed with error -5 [ 748.627874][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.628691][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.647975][T16871] loop3: detected capacity change from 0 to 1024 [ 748.721791][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.729008][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.768770][ T26] kauditd_printk_skb: 208 callbacks suppressed [ 748.768786][ T26] audit: type=1800 audit(1747640712.598:591): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4280" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=25 res=0 errno=0 [ 748.825054][ T7] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 748.856811][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.906463][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.946615][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.981211][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.988493][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.043940][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 749.117650][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 749.139307][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 749.148548][ C0] usblp0: nonzero read bulk status received: -71 [ 749.213112][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.250713][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 749.311045][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 749.350469][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 749.387705][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 749.417099][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 749.459276][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 749.491342][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 749.797764][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 749.850469][ T27] usb 5-1: USB disconnect, device number 50 [ 749.868297][ T27] usblp0: removed [ 750.072992][T16903] loop3: detected capacity change from 0 to 64 [ 750.241698][ T27] usb 1-1: USB disconnect, device number 91 [ 750.450218][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 750.475262][T16821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.497868][T16702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.736466][T16918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4290'. [ 750.862764][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 751.201675][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 751.313787][ T4299] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 751.504596][ T4299] usb 4-1: Using ep0 maxpacket: 8 [ 751.514598][ T4299] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 751.561683][ T4299] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 751.608001][ T4299] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 751.648930][ T4299] usb 4-1: config 250 has no interface number 0 [ 751.677518][ T4299] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 751.763115][ T4299] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 751.865288][ T4299] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 752.016842][ T4299] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 752.102988][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 752.168565][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.222902][ T4299] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 752.406889][ T4299] usb 4-1: config 250 interface 228 has no altsetting 0 [ 752.418523][ T4299] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 752.434814][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 752.453736][ T4299] usb 4-1: Product: syz [ 752.459778][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 752.462468][ T4299] usb 4-1: SerialNumber: syz [ 752.478682][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.490109][ T4299] hub 4-1:250.228: bad descriptor, ignoring hub [ 752.501350][ T4299] hub: probe of 4-1:250.228 failed with error -5 [ 752.520676][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.545949][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.570222][T16702] device veth0_vlan entered promiscuous mode [ 752.629643][T16702] device veth1_vlan entered promiscuous mode [ 752.694883][ T4255] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 752.702871][ T4299] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 79 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 752.716159][T16969] loop1: detected capacity change from 0 to 256 [ 752.723297][T16969] exfat: Deprecated parameter 'namecase' [ 752.741033][T16969] exfat: Deprecated parameter 'namecase' [ 752.767692][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.785878][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.794141][T16969] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 752.825490][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.844936][T16247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.915624][T16702] device veth0_macvtap entered promiscuous mode [ 752.952456][ T4255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.954139][T16702] device veth1_macvtap entered promiscuous mode [ 752.990493][ T4255] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.994250][ C1] usblp0: nonzero read bulk status received: -71 [ 753.032117][ T4255] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 753.072136][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.090913][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.109167][ T4255] usb 5-1: Product: syz [ 753.113390][ T4255] usb 5-1: Manufacturer: syz [ 753.117226][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.121365][ T4255] usb 5-1: SerialNumber: syz [ 753.143424][ T4255] usb 5-1: config 0 descriptor?? [ 753.158927][T16702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.169930][ T4255] powermate: probe of 5-1:0.0 failed with error -22 [ 753.179321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 753.188958][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 753.256232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 753.267357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 753.280333][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.309540][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.344964][T16702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.372284][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 753.388844][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 753.406088][T16702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.420075][T16702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.439833][T16702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.449109][T16702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.658490][T16393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.694781][ T7] usb 4-1: USB disconnect, device number 79 [ 753.713031][T16393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.751409][ T7] usblp0: removed [ 753.778380][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.797718][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.825417][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 753.898632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 754.051202][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4305'. [ 754.403789][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 754.594800][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 754.602687][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 754.646428][ T27] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 754.685734][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.725864][ T27] usb 6-1: Product: syz [ 754.744538][ T27] usb 6-1: Manufacturer: syz [ 754.766815][ T27] usb 6-1: SerialNumber: syz [ 754.801006][ T27] usb 6-1: config 0 descriptor?? [ 755.177511][ T4299] usb 5-1: USB disconnect, device number 51 [ 755.615953][T16989] syz.0.4304 (16989): drop_caches: 1 [ 755.618369][T16990] syz.0.4304 (16990): drop_caches: 1 [ 756.168517][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4317'. [ 756.253821][ T4299] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 756.454119][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 756.469925][ T4299] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 756.497447][ T4299] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.552540][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.590166][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.661944][ T4299] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.739109][ T4299] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 756.823972][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.937808][ T4255] usb 6-1: USB disconnect, device number 2 [ 757.134619][ T4299] usb 1-1: GET_CAPABILITIES returned 0 [ 757.140240][ T4299] usbtmc 1-1:16.0: can't read capabilities [ 757.322818][T17068] loop1: detected capacity change from 0 to 64 [ 757.486493][T17071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.534010][T17071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.788706][T17039] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 757.804271][ T4354] usb 1-1: USB disconnect, device number 92 [ 757.864286][T17072] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 758.861620][T17099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4328'. [ 758.920109][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4329'. [ 759.025757][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 759.117914][T17083] syz.3.4325 (17083): drop_caches: 1 [ 759.332328][T17110] loop0: detected capacity change from 0 to 1024 [ 759.376052][T17084] syz.3.4325 (17084): drop_caches: 1 [ 759.377840][T17110] EXT4-fs: Ignoring removed mblk_io_submit option [ 759.464509][T17110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 759.532724][T17117] loop5: detected capacity change from 0 to 64 [ 759.544399][ T4299] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 759.557898][T17119] loop3: detected capacity change from 0 to 64 [ 759.754584][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 760.206635][ T4299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.248052][ T4299] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 760.274347][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.307671][ T4299] usb 5-1: config 0 descriptor?? [ 760.325347][ T4299] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 760.481322][T17123] loop1: detected capacity change from 0 to 64 [ 760.920207][ T4299] gspca_vc032x: reg_r err -71 [ 760.926430][ T4299] vc032x: probe of 5-1:0.0 failed with error -71 [ 760.976740][ T4299] usb 5-1: USB disconnect, device number 52 [ 761.058347][T17134] loop3: detected capacity change from 0 to 2048 [ 761.059431][T16247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 761.123665][T17134] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 761.174249][T16247] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 761.177456][T17134] NILFS (loop3): mounting unchecked fs [ 761.258806][ T5069] udevd[5069]: incorrect nilfs2 checksum on /dev/loop3 [ 761.268666][T16247] EXT4-fs (loop0): This should not happen!! Data will be lost [ 761.268666][T16247] [ 761.333724][T16247] EXT4-fs (loop0): Total free blocks count 0 [ 761.357057][T16247] EXT4-fs (loop0): Free/Dirty block details [ 761.357215][T17134] NILFS (loop3): recovery complete [ 761.413789][T17141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 761.421822][T16247] EXT4-fs (loop0): free_blocks=68451041280 [ 761.525314][T16247] EXT4-fs (loop0): dirty_blocks=2096 [ 761.557166][T16247] EXT4-fs (loop0): Block reservation details [ 761.660926][T16247] EXT4-fs (loop0): i_reserved_data_blocks=131 [ 761.927941][T16247] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 44 with error 28 [ 762.214020][T17156] loop5: detected capacity change from 0 to 64 [ 762.603730][ T4255] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 762.862091][ T4255] usb 4-1: Using ep0 maxpacket: 8 [ 763.144512][ T4255] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 763.274351][ T4255] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 763.282938][ T4255] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 763.292601][ T4255] usb 4-1: config 250 has no interface number 0 [ 763.299305][ T4255] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 763.312072][ T4255] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 763.323041][ T4255] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.334347][ T4255] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 763.348338][ T4255] usb 4-1: config 250 interface 228 has no altsetting 0 [ 763.359120][ T4255] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 763.380609][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 763.398069][ T4255] usb 4-1: Product: syz [ 763.402397][ T4255] usb 4-1: SerialNumber: syz [ 763.437066][ T4255] hub 4-1:250.228: bad descriptor, ignoring hub [ 763.475323][ T4255] hub: probe of 4-1:250.228 failed with error -5 [ 763.953949][ T4354] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 764.146362][ T4354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.169725][ T4354] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.192900][T17198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.210602][T17198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.224867][ T4354] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 764.307048][ T4354] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.331376][ T4354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.373183][ T4354] usb 6-1: config 0 descriptor?? [ 764.563347][T17201] syz.1.4356 (17201): drop_caches: 1 [ 764.678348][T17204] syz.1.4356 (17204): drop_caches: 1 [ 764.801477][ T4354] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 12/15 [ 764.830086][ T4354] plantronics 0003:047F:FFFF.0009: parse failed [ 764.845230][ T4354] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 764.962932][T17201] syz.1.4356 (17201): drop_caches: 1 [ 765.002510][ T4354] usb 6-1: USB disconnect, device number 3 [ 765.414366][ T4255] usb 4-1: USB disconnect, device number 80 [ 765.784654][T17228] input: syz0 as /devices/virtual/input/input19 [ 765.794050][ T4354] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 766.024113][ T4354] usb 4-1: Using ep0 maxpacket: 8 [ 766.036515][ T4354] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 766.060867][ T4354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.087975][ T4354] usb 4-1: config 0 has no interface number 0 [ 766.102948][ T4354] usb 4-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0x35, skipping [ 766.133377][ T4354] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.181181][ T4354] usb 4-1: config 0 interface 52 has no altsetting 0 [ 766.208757][ T4354] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 766.234207][ T4354] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 766.261398][ T4354] usb 4-1: Manufacturer: syz [ 766.309385][ T4354] usb 4-1: config 0 descriptor?? [ 766.824004][ T4354] usb 4-1: USB disconnect, device number 81 [ 767.800912][T17258] syz.0.4368 (17258): drop_caches: 2 [ 768.153651][T16438] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 769.163691][T16438] usb 2-1: Using ep0 maxpacket: 8 [ 769.174813][T16438] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 769.195487][T16438] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 769.208574][T16438] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 769.219009][T16438] usb 2-1: config 250 has no interface number 0 [ 769.225701][T16438] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 769.238701][T16438] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 769.251595][T16438] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 769.262338][T16438] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 769.276621][T16438] usb 2-1: config 250 interface 228 has no altsetting 0 [ 769.296121][T16438] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 769.305796][T16438] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 769.326010][T16438] usb 2-1: Product: syz [ 769.330412][T16438] usb 2-1: SerialNumber: syz [ 769.374444][T16438] hub 2-1:250.228: bad descriptor, ignoring hub [ 769.390943][T16438] hub: probe of 2-1:250.228 failed with error -5 [ 769.995606][T17304] loop5: detected capacity change from 0 to 256 [ 770.113615][T17304] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 770.124722][T17298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.158070][T17298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.180042][T17304] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 770.241646][T17304] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 770.373997][ T14] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 770.567922][T17319] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 770.574868][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 770.576769][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 770.636579][ T14] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 770.698111][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.730308][ T14] usb 5-1: Product: syz [ 770.746929][ T14] usb 5-1: Manufacturer: syz [ 770.762773][ T14] usb 5-1: SerialNumber: syz [ 770.791748][ T14] usb 5-1: config 0 descriptor?? [ 771.323877][ T4255] usb 2-1: USB disconnect, device number 79 [ 771.632444][ T4255] usb 5-1: USB disconnect, device number 53 [ 772.852772][T17408] netlink: 'syz.4.4391': attribute type 39 has an invalid length. [ 774.135494][T17417] overlayfs: unrecognized mount option "verity=on" or missing value [ 775.689248][T17443] loop4: detected capacity change from 0 to 764 [ 775.736052][T17411] loop5: detected capacity change from 0 to 40427 [ 775.772194][T17411] F2FS-fs (loop5): build fault injection attr: rate: 2801, type: 0x3ffff [ 775.801053][T17443] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 775.937666][T17411] F2FS-fs (loop5): invalid crc value [ 776.003975][T17411] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 776.374306][ T7] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 776.457287][ T5069] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 776.593781][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 776.600826][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 776.647824][ T7] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 776.704358][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.753076][ T7] usb 1-1: Product: syz [ 776.778439][ T7] usb 1-1: Manufacturer: syz [ 776.808799][ T7] usb 1-1: SerialNumber: syz [ 776.895335][ T7] usb 1-1: config 0 descriptor?? [ 776.929198][T17456] loop3: detected capacity change from 0 to 40427 [ 776.954826][T17456] F2FS-fs (loop3): invalid crc value [ 776.973347][T17437] loop1: detected capacity change from 0 to 32768 [ 776.987460][T17437] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.4399 (17437) [ 777.034467][T17456] F2FS-fs (loop3): Found nat_bits in checkpoint [ 777.085674][T17456] F2FS-fs (loop3): Start checkpoint disabled! [ 777.158324][T17437] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 777.162530][T17456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 777.263934][T17437] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 777.314348][T17437] BTRFS info (device loop1): enabling auto defrag [ 777.320886][T17437] BTRFS info (device loop1): doing ref verification [ 777.443178][T17472] Illegal XDP return value 4294967274 on prog (id 26) dev N/A, expect packet loss! [ 777.565656][T17437] BTRFS info (device loop1): max_inline at 0 [ 777.585601][T17437] BTRFS info (device loop1): force clearing of disk cache [ 777.594892][T17437] BTRFS info (device loop1): disabling free space tree [ 778.154735][ T4255] usb 1-1: USB disconnect, device number 93 [ 778.358158][T17371] kworker/u4:20: attempt to access beyond end of device [ 778.358158][T17371] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 778.416658][T17453] loop4: detected capacity change from 0 to 32768 [ 778.431125][T17371] kworker/u4:20: attempt to access beyond end of device [ 778.431125][T17371] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 778.480173][T17453] find_entry called with index = 0 [ 778.500903][T17453] read_mapping_page failed! [ 778.506660][T17453] ERROR: (device loop4): txCommit: [ 778.506660][T17453] [ 778.546319][T17437] BTRFS info (device loop1): enabling ssd optimizations [ 778.582779][T17437] BTRFS info (device loop1): rebuilding free space tree [ 778.882997][T17437] BTRFS info (device loop1): disabling free space tree [ 778.949174][T17437] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 779.039031][T17437] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 779.163722][ T4255] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 779.376002][ T4255] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.406377][ T4255] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 779.424242][T12722] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 779.581895][T17513] loop5: detected capacity change from 0 to 2048 [ 779.698952][T17513] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 779.706857][T17513] UDF-fs: Scanning with blocksize 512 failed [ 779.741686][T17513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.237699][ T4255] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 780.372219][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.414801][ T4255] usb 5-1: Product: syz [ 780.440401][ T4255] usb 5-1: Manufacturer: syz [ 780.464781][ T4255] usb 5-1: SerialNumber: syz [ 780.495138][ T4255] usb 5-1: config 0 descriptor?? [ 780.542706][ T4255] powermate: probe of 5-1:0.0 failed with error -22 [ 781.101495][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4415'. [ 781.545623][T17535] device hsr_slave_1 left promiscuous mode [ 781.724043][ T27] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 781.724635][T17517] loop0: detected capacity change from 0 to 32768 [ 781.923751][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 781.943448][ T27] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 781.979888][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.032511][T17547] syz.3.4416 (17547): drop_caches: 1 [ 782.035635][ T27] usb 2-1: Product: syz [ 782.077182][ T27] usb 2-1: Manufacturer: syz [ 782.092926][ T27] usb 2-1: SerialNumber: syz [ 782.163288][T17544] syz.3.4416 (17544): drop_caches: 1 [ 783.151530][ T27] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 783.184977][ T27] usb 2-1: USB disconnect, device number 80 [ 783.266400][ T14] usb 5-1: USB disconnect, device number 54 [ 783.444505][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.445335][T17572] netlink: 'syz.1.4423': attribute type 39 has an invalid length. [ 783.638168][T14952] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 783.909315][T14952] usb 6-1: Using ep0 maxpacket: 32 [ 784.170760][T14952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 784.389383][T14952] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 784.414815][T14952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.422869][T14952] usb 6-1: Product: syz [ 784.469974][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4428'. [ 784.481322][T14952] usb 6-1: Manufacturer: syz [ 784.492853][T14952] usb 6-1: SerialNumber: syz [ 784.524852][T14952] usb 6-1: config 0 descriptor?? [ 785.749330][T16438] usb 6-1: USB disconnect, device number 4 [ 786.093902][ T127] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 786.160316][T17606] syz.1.4432 (17606): drop_caches: 1 [ 786.184698][T17601] syz.1.4432 (17601): drop_caches: 1 [ 786.211873][T17592] loop3: detected capacity change from 0 to 32768 [ 786.223751][ T14] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 786.293747][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 786.306055][ T127] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 786.319587][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.328372][ T127] usb 1-1: Product: syz [ 786.343204][ T127] usb 1-1: Manufacturer: syz [ 786.382360][ T127] usb 1-1: SerialNumber: syz [ 786.416400][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.468084][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.524638][ T14] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 786.557426][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.613930][ T14] usb 5-1: Product: syz [ 786.625800][ T14] usb 5-1: Manufacturer: syz [ 786.644358][ T14] usb 5-1: SerialNumber: syz [ 786.650399][T17622] loop5: detected capacity change from 0 to 512 [ 786.667072][ T127] snd-usb-audio: probe of 1-1:222.0 failed with error -71 [ 786.682349][ T14] usb 5-1: config 0 descriptor?? [ 786.709043][T17626] netlink: 'syz.1.4438': attribute type 39 has an invalid length. [ 786.712159][ T14] powermate: probe of 5-1:0.0 failed with error -22 [ 786.719457][ T127] usb 1-1: USB disconnect, device number 94 [ 786.746144][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.824501][T17622] EXT4-fs (loop5): 1 orphan inode deleted [ 786.846416][ T4309] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 786.863598][T17622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 786.872882][ T4309] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:6: Failed to release dquot type 1 [ 786.910705][T17622] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.002013][T17622] EXT4-fs (loop5): shut down requested (1) [ 787.144909][T16702] EXT4-fs (loop5): unmounting filesystem. [ 787.151127][T17384] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 787.683293][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 789.129992][T16438] usb 5-1: USB disconnect, device number 55 [ 789.234231][T14952] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 789.339503][T17680] netlink: 'syz.4.4450': attribute type 39 has an invalid length. [ 789.366255][T17668] syz.5.4446 (17668): drop_caches: 1 [ 789.434060][T14952] usb 1-1: Using ep0 maxpacket: 32 [ 789.445306][T14952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.491542][T14952] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 789.551605][T14952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.574231][T14952] usb 1-1: Product: syz [ 789.578452][T14952] usb 1-1: Manufacturer: syz [ 789.644162][T14952] usb 1-1: SerialNumber: syz [ 789.658404][T14952] usb 1-1: config 0 descriptor?? [ 789.672939][T17669] syz.5.4446 (17669): drop_caches: 1 [ 789.861483][T17668] syz.5.4446 (17668): drop_caches: 1 [ 789.942207][T17667] loop3: detected capacity change from 0 to 32768 [ 789.953732][ T14] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 790.252917][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 790.263845][T17697] 9pnet_virtio: no channels available for device 127.0.0.1 [ 790.983333][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 791.030312][ T14] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 791.049400][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.058822][ T14] usb 5-1: Product: syz [ 791.063373][ T14] usb 5-1: Manufacturer: syz [ 791.068908][ T14] usb 5-1: SerialNumber: syz [ 791.108402][T14952] usb 1-1: USB disconnect, device number 95 [ 791.744374][ T14] snd-usb-audio: probe of 5-1:222.0 failed with error -71 [ 791.760325][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.781750][ T14] usb 5-1: USB disconnect, device number 56 [ 792.427500][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'. [ 792.703639][T17523] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 792.732561][T17729] netlink: 'syz.3.4463': attribute type 39 has an invalid length. [ 792.899694][T17523] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.930062][T17523] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 792.956762][T17523] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 792.975005][T17523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.990055][T17523] usb 5-1: Product: syz [ 792.997076][T17523] usb 5-1: Manufacturer: syz [ 793.006889][T17523] usb 5-1: SerialNumber: syz [ 793.022423][T17523] usb 5-1: config 0 descriptor?? [ 793.050972][T17523] powermate: probe of 5-1:0.0 failed with error -22 [ 793.239428][ T27] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 793.424109][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 793.434061][ T27] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 793.489343][ T27] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 793.520640][ T27] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 793.563213][ T27] usb 4-1: config 250 has no interface number 0 [ 793.577957][ T27] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 793.603744][ T27] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 793.633744][ T27] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 793.661438][ T27] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 793.685575][ T27] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 793.715392][ T27] usb 4-1: config 250 interface 228 has no altsetting 0 [ 793.740424][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 793.766789][ T27] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 793.785857][ T27] usb 4-1: Product: syz [ 793.798027][ T27] usb 4-1: SerialNumber: syz [ 793.832488][ T27] hub 4-1:250.228: bad descriptor, ignoring hub [ 793.849683][ T27] hub: probe of 4-1:250.228 failed with error -5 [ 794.036495][ T27] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 82 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 794.048102][T16438] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 794.297093][T16438] usb 1-1: config 0 has no interfaces? [ 794.365910][T16438] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 794.383791][T16438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.415918][T16438] usb 1-1: Product: syz [ 794.420161][T16438] usb 1-1: Manufacturer: syz [ 794.429917][T16438] usb 1-1: SerialNumber: syz [ 794.441986][T16438] usb 1-1: config 0 descriptor?? [ 794.513686][ T27] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 794.723625][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 794.730301][ T27] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 794.739361][ T27] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 794.749895][ T27] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 794.759358][ T27] usb 2-1: config 250 has no interface number 0 [ 794.797882][ T27] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 794.847462][ T27] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 794.867447][ T27] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 794.886669][ T27] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 794.903306][ T27] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 794.943795][ T27] usb 2-1: config 250 interface 228 has no altsetting 0 [ 794.964632][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 794.974465][ T27] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 794.983154][ T27] usb 2-1: Product: syz [ 794.988438][ T27] usb 2-1: SerialNumber: syz [ 795.010103][ T27] hub 2-1:250.228: bad descriptor, ignoring hub [ 795.017093][ T27] hub: probe of 2-1:250.228 failed with error -5 [ 795.164560][T16438] usb 4-1: USB disconnect, device number 82 [ 795.182489][T16438] usblp0: removed [ 795.210485][ T27] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 81 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 795.305099][ T27] usb 2-1: USB disconnect, device number 81 [ 795.322471][ T27] usblp0: removed [ 795.567560][T17791] loop5: detected capacity change from 0 to 64 [ 795.667220][T14952] usb 5-1: USB disconnect, device number 57 [ 795.833750][ T27] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 795.881504][T17797] loop5: detected capacity change from 0 to 256 [ 795.917721][T17797] exfat: Unknown parameter 'zero_size_dir' [ 796.053885][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 796.057852][T17799] netlink: 'syz.5.4476': attribute type 2 has an invalid length. [ 796.088513][ T27] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 796.153902][ T27] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 796.163599][ T27] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 796.173588][ T27] usb 2-1: config 250 has no interface number 0 [ 796.184241][ T27] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 796.196151][ T27] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 796.207842][ T27] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 796.225267][ T27] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 796.381610][ T27] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 796.583004][ T27] usb 2-1: config 250 interface 228 has no altsetting 0 [ 796.605415][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 796.614826][ T27] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 796.623099][ T27] usb 2-1: Product: syz [ 796.627352][ T27] usb 2-1: SerialNumber: syz [ 796.662203][ T27] hub 2-1:250.228: bad descriptor, ignoring hub [ 796.703999][ T27] hub: probe of 2-1:250.228 failed with error -5 [ 796.857569][ T27] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 82 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 797.014822][ T27] usb 2-1: USB disconnect, device number 82 [ 797.068758][ T27] usblp0: removed [ 797.483651][ T4354] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 797.507517][T14952] usb 1-1: USB disconnect, device number 96 [ 797.622464][T17814] netlink: 'syz.0.4481': attribute type 39 has an invalid length. [ 797.683939][ T4354] usb 4-1: Using ep0 maxpacket: 16 [ 797.696297][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 797.708869][ T4354] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 797.747312][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.764546][ T4354] usb 4-1: Product: syz [ 797.777165][ T4354] usb 4-1: Manufacturer: syz [ 797.794298][ T4354] usb 4-1: SerialNumber: syz [ 798.115138][ T4354] snd-usb-audio: probe of 4-1:222.0 failed with error -71 [ 798.188874][ T4354] usb 4-1: USB disconnect, device number 83 [ 798.198623][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 798.665904][T14952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 798.864303][T14952] usb 6-1: Using ep0 maxpacket: 8 [ 798.871582][T14952] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 798.890771][T14952] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 798.910253][T14952] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 798.943420][T14952] usb 6-1: config 250 has no interface number 0 [ 798.968405][T14952] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 798.990531][T14952] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 799.021521][T14952] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.035728][T14952] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 799.053881][ T127] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 799.061619][T14952] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 799.090528][T14952] usb 6-1: config 250 interface 228 has no altsetting 0 [ 799.114014][T14952] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 799.133233][T14952] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 799.155557][T14952] usb 6-1: Product: syz [ 799.165604][T14952] usb 6-1: SerialNumber: syz [ 799.203762][T14952] hub 6-1:250.228: bad descriptor, ignoring hub [ 799.210084][T14952] hub: probe of 6-1:250.228 failed with error -5 [ 799.257958][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.298889][ T127] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.326396][ T127] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 799.343807][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.362176][ T127] usb 4-1: Product: syz [ 799.369969][ T127] usb 4-1: Manufacturer: syz [ 799.381948][ T127] usb 4-1: SerialNumber: syz [ 799.390591][ T127] usb 4-1: config 0 descriptor?? [ 799.397751][T14952] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 799.422546][ T127] powermate: probe of 4-1:0.0 failed with error -22 [ 799.505970][T17857] loop0: detected capacity change from 0 to 4096 [ 799.538451][T17857] NILFS (loop0): invalid segment: Checksum error in segment payload [ 799.554358][T17857] NILFS (loop0): trying rollback from an earlier position [ 799.599570][T17857] NILFS (loop0): recovery complete [ 799.626387][T17863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 799.883955][ T127] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 800.074039][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 800.081319][ T127] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 800.083651][ T14] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 800.121454][ T127] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 800.147994][ T127] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 800.193723][ T127] usb 2-1: config 250 has no interface number 0 [ 800.210770][ T127] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 800.240430][ T127] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 800.282000][ T127] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 800.293832][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 800.301236][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 800.307405][T17884] netlink: 'syz.4.4493': attribute type 39 has an invalid length. [ 800.328397][ T127] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 800.339528][ T14] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 800.342623][ T127] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 800.356967][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.371740][ T127] usb 2-1: config 250 interface 228 has no altsetting 0 [ 800.399461][ T127] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 800.408962][ T127] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 800.412619][ T14] usb 1-1: Product: syz [ 800.427934][ T127] usb 2-1: Product: syz [ 800.435640][ T127] usb 2-1: SerialNumber: syz [ 800.449267][ T127] hub 2-1:250.228: bad descriptor, ignoring hub [ 800.459267][ T14] usb 1-1: Manufacturer: syz [ 800.464600][ T127] hub: probe of 2-1:250.228 failed with error -5 [ 800.473401][ T14] usb 1-1: SerialNumber: syz [ 800.507669][ T14] usb 1-1: config 0 descriptor?? [ 800.652908][ T127] usblp 2-1:250.228: usblp1: USB Bidirectional printer dev 83 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 800.666017][T14952] usb 6-1: USB disconnect, device number 5 [ 800.676265][T14952] usblp0: removed [ 800.715604][ T127] usb 2-1: USB disconnect, device number 83 [ 800.727997][ T127] usblp1: removed [ 800.942279][ T14] usb 1-1: USB disconnect, device number 97 [ 800.963671][T12678] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 801.153611][T12678] usb 5-1: Using ep0 maxpacket: 16 [ 801.162795][T12678] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 801.172749][T12678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.180900][T12678] usb 5-1: Product: syz [ 801.185308][T12678] usb 5-1: Manufacturer: syz [ 801.189925][T12678] usb 5-1: SerialNumber: syz [ 801.233886][ T127] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 801.425707][T12678] snd-usb-audio: probe of 5-1:222.0 failed with error -71 [ 801.434182][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 801.447542][ T127] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 801.461496][T12678] usb 5-1: USB disconnect, device number 58 [ 801.469203][ T127] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 801.479485][ T127] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 801.490216][ T127] usb 2-1: config 250 has no interface number 0 [ 801.496949][ T127] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 801.578185][ T127] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 801.610748][ T127] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 801.643169][ T127] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 801.665671][ T127] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 801.682272][ T127] usb 2-1: config 250 interface 228 has no altsetting 0 [ 801.692080][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.694489][ T127] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 801.739858][ T127] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 801.767222][ T127] usb 2-1: Product: syz [ 801.802902][ T127] usb 2-1: SerialNumber: syz [ 801.848165][ T127] hub 2-1:250.228: bad descriptor, ignoring hub [ 801.883045][ T127] hub: probe of 2-1:250.228 failed with error -5 [ 801.907263][ T27] usb 4-1: USB disconnect, device number 84 [ 802.043113][ T127] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 84 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 802.105245][ T127] usb 2-1: USB disconnect, device number 84 [ 802.124311][ T127] usblp0: removed [ 802.443607][ T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 802.533912][ T27] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 802.551317][T17906] loop3: detected capacity change from 0 to 32768 [ 802.635904][ T14] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 802.664393][ T14] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 802.743698][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 802.751772][ T27] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 802.760234][ T14] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.760265][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.765954][T17907] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 802.791561][T17906] MetaData crosses page boundary!! [ 802.801824][T17906] lblock = 66f862, size = 45056 [ 802.820644][T17906] CPU: 0 PID: 17906 Comm: syz.3.4500 Not tainted 6.1.139-syzkaller #0 [ 802.828955][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 802.839110][T17906] Call Trace: [ 802.842399][T17906] [ 802.845350][T17906] dump_stack_lvl+0x168/0x22e [ 802.850042][T17906] ? __wake_up_bit+0x1e0/0x1e0 [ 802.854816][T17906] ? show_regs_print_info+0x12/0x12 [ 802.860024][T17906] ? load_image+0x3b0/0x3b0 [ 802.864538][T17906] ? folio_unlock+0x114/0x2e0 [ 802.869231][T17906] __get_metapage+0xaa8/0xfa0 [ 802.873937][T17906] dtSearch+0x5d5/0x2050 [ 802.878229][T17906] jfs_lookup+0x152/0x380 [ 802.882575][T17906] ? jfs_get_parent+0xa0/0xa0 [ 802.887261][T17906] ? d_alloc_parallel+0x136f/0x1480 [ 802.892481][T17906] ? lockdep_softirqs_off+0x420/0x420 [ 802.897862][T17906] ? d_hash_and_lookup+0x1b0/0x1b0 [ 802.903022][T17906] ? __init_waitqueue_head+0xa5/0x150 [ 802.908408][T17906] __lookup_slow+0x27d/0x3a0 [ 802.913016][T17906] ? lookup_one_len+0x2c0/0x2c0 [ 802.917896][T17906] ? try_to_unlazy+0x34c/0x5a0 [ 802.922683][T17906] ? preempt_count_add+0x8d/0x190 [ 802.927710][T17906] ? down_read+0x1a8/0x2d0 [ 802.932134][T17906] lookup_slow+0x53/0x70 [ 802.936523][T17906] walk_component+0x2be/0x3f0 [ 802.941250][T17906] ? path_lookupat+0x15c/0x440 [ 802.946030][T17906] path_lookupat+0x169/0x440 [ 802.950638][T17906] filename_lookup+0x1f0/0x500 [ 802.955420][T17906] ? hashlen_string+0x110/0x110 [ 802.960298][T17906] ? strncpy_from_user+0x1e3/0x350 [ 802.965432][T17906] ? getname_flags+0x206/0x500 [ 802.970206][T17906] user_path_at_empty+0x3e/0x60 [ 802.975079][T17906] __se_sys_mount+0x297/0x3c0 [ 802.979772][T17906] ? __x64_sys_mount+0xc0/0xc0 [ 802.984552][T17906] ? lockdep_hardirqs_on+0x94/0x140 [ 802.989775][T17906] ? __x64_sys_mount+0x1c/0xc0 [ 802.994550][T17906] do_syscall_64+0x4c/0xa0 [ 802.998980][T17906] ? clear_bhb_loop+0x60/0xb0 [ 803.003665][T17906] ? clear_bhb_loop+0x60/0xb0 [ 803.008350][T17906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.014262][T17906] RIP: 0033:0x7f777438e969 [ 803.018741][T17906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.038385][T17906] RSP: 002b:00007f77751d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 803.046815][T17906] RAX: ffffffffffffffda RBX: 00007f77745b5fa0 RCX: 00007f777438e969 [ 803.054802][T17906] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 803.062784][T17906] RBP: 00007f7774410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 803.070768][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.078745][T17906] R13: 0000000000000000 R14: 00007f77745b5fa0 R15: 00007ffe04010578 [ 803.086738][T17906] [ 803.094699][ T27] usb 5-1: config 1 has no interface number 0 [ 803.102744][ T27] usb 5-1: config 1 interface 242 has no altsetting 0 [ 803.123439][ T27] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 803.132921][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.143326][ T27] usb 5-1: Product: syz [ 803.148947][T17906] bread failed! [ 803.152651][T17906] jfs_lookup: dtSearch returned -5 [ 803.158437][ T27] usb 5-1: Manufacturer: syz [ 803.171364][ T27] usb 5-1: SerialNumber: syz [ 803.391623][T17523] usb 6-1: USB disconnect, device number 6 [ 804.453983][T14952] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 804.541366][ T27] aqc111 5-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 804.554119][T17930] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.668858][T14952] usb 6-1: config 0 has no interfaces? [ 804.693674][T14952] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 804.736618][T14952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.781309][T14952] usb 6-1: Product: syz [ 804.800469][T14952] usb 6-1: Manufacturer: syz [ 804.814838][T14952] usb 6-1: SerialNumber: syz [ 804.835065][T14952] usb 6-1: config 0 descriptor?? [ 805.217457][ T26] audit: type=1326 audit(1747640769.038:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.293041][ T26] audit: type=1326 audit(1747640769.048:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.336843][ T26] audit: type=1326 audit(1747640769.048:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.429611][ T26] audit: type=1326 audit(1747640769.048:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.469677][ T26] audit: type=1326 audit(1747640769.118:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.590175][ T26] audit: type=1326 audit(1747640769.118:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.773752][T17934] loop0: detected capacity change from 0 to 2048 [ 805.781555][ T26] audit: type=1326 audit(1747640769.338:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.823883][ T26] audit: type=1326 audit(1747640769.338:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.856133][ T26] audit: type=1326 audit(1747640769.338:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.891351][T17934] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 805.914248][ T26] audit: type=1326 audit(1747640769.338:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17925 comm="syz.5.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96d198e969 code=0x7ffc0000 [ 805.945673][ T27] aqc111 5-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 806.030942][ T27] aqc111 5-1:1.242 eth5: register 'aqc111' at usb-dummy_hcd.4-1, Aquantia AQtion USB to 5GbE Controller, 56:71:95:7a:21:12 [ 806.095567][T17934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 806.131818][ T27] usb 5-1: USB disconnect, device number 59 [ 806.159338][ T27] aqc111 5-1:1.242 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, Aquantia AQtion USB to 5GbE Controller [ 806.304259][ T27] aqc111 5-1:1.242 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 806.343344][ T27] aqc111 5-1:1.242 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 806.410416][ T27] aqc111 5-1:1.242 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 911.773488][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 911.780203][ C0] rcu: 0-...!: (10499 ticks this GP) idle=ce9c/0/0x1 softirq=89329/89338 fqs=1 [ 911.791142][ C0] (t=10500 jiffies g=132973 q=90 ncpus=2) [ 911.796980][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g132973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 911.808288][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 911.818277][ C0] rcu: RCU grace-period kthread stack dump: [ 911.824190][ C0] task:rcu_preempt state:R running task stack:27432 pid:16 ppid:2 flags:0x00004000 [ 911.835001][ C0] Call Trace: [ 911.838301][ C0] [ 911.841261][ C0] __schedule+0x10e9/0x40d0 [ 911.845820][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 911.851840][ C0] schedule+0xb9/0x180 [ 911.855940][ C0] schedule_timeout+0x15c/0x280 [ 911.860825][ C0] ? console_conditional_schedule+0x40/0x40 [ 911.866754][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 911.872682][ C0] ? update_process_times+0x1b0/0x1b0 [ 911.878120][ C0] ? prepare_to_swait_event+0x335/0x350 [ 911.883704][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 911.888589][ C0] ? dump_blkd_tasks+0x810/0x810 [ 911.893561][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 911.898348][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 911.903237][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 911.908467][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 911.913707][ C0] rcu_gp_kthread+0x95/0x380 [ 911.918323][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 911.923460][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 911.929390][ C0] ? __kthread_parkme+0x162/0x1c0 [ 911.934461][ C0] kthread+0x29d/0x330 [ 911.938565][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 911.943702][ C0] ? kthread_blkcg+0xd0/0xd0 [ 911.948329][ C0] ret_from_fork+0x1f/0x30 [ 911.952803][ C0] [ 911.955844][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 911.962187][ C0] Sending NMI from CPU 0 to CPUs 1: [ 911.967417][ C1] NMI backtrace for cpu 1 [ 911.967429][ C1] CPU: 1 PID: 17947 Comm: syz.4.4511 Not tainted 6.1.139-syzkaller #0 [ 911.967447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 911.967457][ C1] RIP: 0010:lock_release+0x2e1/0x910 [ 911.967484][ C1] Code: 0f 85 86 02 00 00 48 8b 44 24 40 42 0f b6 04 28 84 c0 0f 85 74 04 00 00 48 8b 04 24 89 10 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <4c> 8b 74 24 08 74 0e 4c 89 e7 48 89 d3 e8 5d dc 6e 00 48 89 da 49 [ 911.967500][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000046 [ 911.967515][ C1] RAX: 1ffff1100f0b1c8e RBX: 1ffff1100f0b1c92 RCX: 0000000000000001 [ 911.967529][ C1] RDX: 0000000000000002 RSI: ffffffff8c92ab20 RDI: ffff88807858e470 [ 911.967541][ C1] RBP: ffffc900001e0bf8 R08: dffffc0000000000 R09: fffffbfff1bfcfb6 [ 911.967555][ C1] R10: fffffbfff1bfcfb6 R11: 1ffffffff1bfcfb5 R12: ffff88807858e470 [ 911.967569][ C1] R13: dffffc0000000000 R14: ffff88807858e490 R15: 1ffff9200003c168 [ 911.967583][ C1] FS: 00007fb088a596c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 911.967599][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.967612][ C1] CR2: 0000200001000000 CR3: 000000001fb70000 CR4: 00000000003506e0 [ 911.967628][ C1] Call Trace: [ 911.967635][ C1] [ 911.967643][ C1] ? __lock_task_sighand+0x25/0x2d0 [ 911.967669][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 911.967691][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 911.967716][ C1] ? _raw_spin_lock+0x40/0x40 [ 911.967741][ C1] ? __lock_task_sighand+0x25/0x2d0 [ 911.967765][ C1] __lock_task_sighand+0x2b0/0x2d0 [ 911.967790][ C1] send_sigqueue+0x159/0x600 [ 911.967816][ C1] ? send_sigqueue+0x8d/0x600 [ 911.967847][ C1] posix_timer_fn+0x16a/0x3d0 [ 911.967866][ C1] __hrtimer_run_queues+0x522/0xc80 [ 911.967888][ C1] ? common_timer_wait_running+0x10/0x10 [ 911.967908][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 911.967926][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 911.967950][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 911.967976][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 911.968002][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 911.968030][ C1] [ 911.968035][ C1] [ 911.968040][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 911.968058][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 911.968084][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee 3e 4a f7 48 89 df e8 46 04 4b f7 e8 b1 06 6e f7 fb bf 01 00 00 00 56 81 3e f7 65 8b 05 f7 42 e9 75 85 c0 74 02 5b c3 e8 44 54 e7 [ 911.968098][ C1] RSP: 0018:ffffc9000e317bb8 EFLAGS: 00000286 [ 911.968112][ C1] RAX: 4de94665c20f3100 RBX: ffff8880550ba500 RCX: 4de94665c20f3100 [ 911.968125][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6c0000 RDI: 0000000000000001 [ 911.968138][ C1] RBP: ffff8880550ba798 R08: dffffc0000000000 R09: ffffed100aa174a1 [ 911.968151][ C1] R10: ffffed100aa174a1 R11: 1ffff1100aa174a0 R12: 1ffff1100aa174f3 [ 911.968164][ C1] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000000000000 [ 911.968183][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 911.968206][ C1] get_signal+0x1163/0x1350 [ 911.968239][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 911.968262][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 911.968285][ C1] ? load_gs_index+0x120/0x120 [ 911.968305][ C1] ? get_sigframe_size+0x10/0x10 [ 911.968333][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 911.968359][ C1] exit_to_user_mode_loop+0x70/0x110 [ 911.968384][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 911.968408][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 911.968425][ C1] do_syscall_64+0x58/0xa0 [ 911.968447][ C1] ? clear_bhb_loop+0x60/0xb0 [ 911.968463][ C1] ? clear_bhb_loop+0x60/0xb0 [ 911.968480][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.968507][ C1] RIP: 0033:0x7fb087b8e969 [ 911.968520][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.968534][ C1] RSP: 002b:00007fb088a59038 EFLAGS: 00000246 [ 911.968547][ C1] RAX: 0000000000fff700 RBX: 00007fb087db6160 RCX: 00007fb087b8e969 [ 911.968560][ C1] RDX: 00000000fffffef0 RSI: 00002000000008c0 RDI: 0000000000000006 [ 911.968571][ C1] RBP: 00007fb087c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 911.968583][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.968593][ C1] R13: 0000000000000000 R14: 00007fb087db6160 R15: 00007ffc1e5e70f8 [ 911.968611][ C1] [ 911.969416][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.139-syzkaller #0 [ 912.411818][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 912.421900][ C0] RIP: 0010:default_idle+0xb/0x10 [ 912.426963][ C0] Code: 48 89 df e8 67 3e b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d f7 92 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 912.446602][ C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6 [ 912.452717][ C0] RAX: 45faae69ce500f00 RBX: ffffffff8a191097 RCX: 45faae69ce500f00 [ 912.460733][ C0] RDX: 0000000000000001 RSI: ffffffff8a6c0000 RDI: ffffffff8abf1020 [ 912.468737][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee [ 912.476743][ C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000 [ 912.484745][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfcff6 [ 912.492760][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 912.501742][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 912.508359][ C0] CR2: 0000556da4cb5000 CR3: 000000001fb70000 CR4: 00000000003506f0 [ 912.516357][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 912.524350][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 912.532432][ C0] Call Trace: [ 912.535735][ C0] [ 912.538693][ C0] default_idle_call+0x84/0xc0 [ 912.543501][ C0] do_idle+0x1fc/0x570 [ 912.547610][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 912.552844][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 912.558080][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 912.563741][ C0] ? schedule_idle+0x57/0x90 [ 912.568365][ C0] cpu_startup_entry+0x3f/0x60 [ 912.573162][ C0] rest_init+0x2dc/0x300 [ 912.577429][ C0] ? time_init+0x33/0x33 [ 912.581705][ C0] arch_call_rest_init+0xa/0xa [ 912.586507][ C0] start_kernel+0x490/0x539 [ 912.591046][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 912.596991][ C0]