last executing test programs: 15.631302369s ago: executing program 1 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000000)='./file0/file0/file0\x00', 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814cef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f008000000b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675bd7cfca148dc488f735da15d99cb458ed37b23535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577ae1057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24d2fa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f10000000000000002b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4af09b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929e1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88ca1bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46a095b11cad830aa64bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe7237e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c48a821d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa4779321ae01051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a37bd163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baafac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b63b6bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0x400007, 0xa003, 0x1ff, {0x8, 0x10000000005, 0x6, 0x40007d, 0x2, 0x3f45, 0xc05, 0x6, 0xa, 0x8000, 0x0, 0x0, r2, 0xe6f, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.48854205s ago: executing program 1 (id=1493): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_REQBUFS(0xffffffffffffffff, 0xc0086f3c, &(0x7f0000000040)={0x401}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 12.901644011s ago: executing program 0 (id=1495): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x102a000, &(0x7f00000006c0)={[{@i_version}, {@nojournal_checksum}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfe, 0x2b0, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x40000, &(0x7f00000002c0)=ANY=[], 0xf9, 0x1223, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, 0x0, 0x145042, 0x2c) 11.819248411s ago: executing program 1 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) 11.602765568s ago: executing program 0 (id=1499): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 10.175297916s ago: executing program 4 (id=1503): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x6c010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x9, 0x9, 0x6, r2}, &(0x7f0000000040)=0x10) 10.099062467s ago: executing program 2 (id=1504): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 9.868685466s ago: executing program 0 (id=1505): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x880) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x64eb2000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000002500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 8.52513358s ago: executing program 0 (id=1506): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x4330, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000540)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 8.388569993s ago: executing program 2 (id=1507): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) r1 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x88e0, 0xffbb8000, 0x34325852, 0x6, 0x3, [{0x2, 0x6}, {0x3}, {0x2000003, 0x5de3}, {0x14, 0x3}, {0x6, 0x4000069a}, {0x7, 0x3}, {0x81, 0x5}, {0x1000003, 0x7}], 0x7b, 0x2, 0x8, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl(r2, 0x400c4d07, &(0x7f0000000a00)) 8.142622141s ago: executing program 2 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r4}) sendmmsg$inet(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {0x0}, {&(0x7f0000001700)}], 0x3}}], 0x1, 0x40) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) close(r5) shmctl$SHM_LOCK(0x0, 0xb) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000002900)=ANY=[@ANYRESDEC=r0, @ANYBLOB="445d1787868c769d3e6845f2b88f4587d39de9231107c862a5a297b28ba8f9cf", @ANYRES16, @ANYRESOCT, @ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 7.177503353s ago: executing program 1 (id=1509): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x102a000, &(0x7f00000006c0)={[{@i_version}, {@nojournal_checksum}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfe, 0x2b0, &(0x7f0000001000)="$eJzs3b9rJFUcAPDvzP6IMcd5amMlgpUGwlkIgo02CgdyiIigBydy2gh34um1t1a29irXH2LlL7ARm2DjHxAxRWxsgoVBwRQjOzMrk81kM+vuzh7Zzwd29r3Nm7zvkv2+mez8eAGsrAsR8VxEdCJiMyJ6EZFUGzxWPC6U1Tvr21cjsuyVP5K8XVEvjNbbiIhBRDwT0R397NY3b+z9tdMva6+vt/Hexu3v7b508Pnlj7++9NSttHztXPlcfR/zlNS81k0iHlpEZ/eIpNuw4dqCA+EUX/4yzPuHI+LxPP97kZYp+8nN/o+9ePKz+vX6B+3GCSxClvWG28BBlmVZkteBVZHm+8BJuhURRTlNt7YiNkZ76DdufrD5zo0Pr19b8kAFnO6rwyyb3CIZFP/37r7w3dq3G2P5/3unyP9Gnp5HwEDbhvn/6st3fx2WDzrLjgZYlMrXrN+PCsP833zz9hMh/+FMaXJwTf7DWdP0wKv8h1U2Vf6n7cQETGlS7k44v8r2H1aX/IfV1TT/By3GBMxJb1Soz+AT8z+pu2Klzt/lGYQzxgm06Hy+tP8Pq2ss/8tTBsptf7Od/hffvvbu4gIE5u3KqFDNfwBgtWRrS74AGViaZY8/AAAAAAAAAAAAAAAAAADAcXfWt6+OHm31+dOnEfvPF9MWVfsvpi3olNOO3Jcv7/8zOTK7UTLVbEf1rsy4/qy+mPPV15cnzPdQ5/xv8+2/+V+kny9/fnTe/Rc+Olo9cTq829cjBsPGF7vd45//pOm0Nyf+/gdPWbH3VrMO/r8H3q/Wxu/s++xri+6/Ijt+X+HDuy32X+PSTsQPw/HnYt34l8Yj+XP9+HOueovl+O8jPZX3/pklegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr0bwAAAP//RiVxfA==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x40000, &(0x7f00000002c0)=ANY=[], 0xf9, 0x1223, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, 0x0, 0x145042, 0x2c) 6.153646918s ago: executing program 1 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) timer_create(0xfd39acc4961eb155, 0x0, &(0x7f0000000140)) 5.811281564s ago: executing program 1 (id=1512): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 5.515431987s ago: executing program 4 (id=1514): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x240, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) close(r0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x40010) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x803ff) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(r2, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) 5.045699404s ago: executing program 2 (id=1517): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) 4.947137645s ago: executing program 3 (id=1518): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x4330, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000540)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 3.830386474s ago: executing program 2 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) 3.830089156s ago: executing program 3 (id=1520): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000e, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.829411329s ago: executing program 4 (id=1521): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x102a000, &(0x7f00000006c0)={[{@i_version}, {@nojournal_checksum}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xfe, 0x2b0, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x40000, &(0x7f00000002c0)=ANY=[], 0xf9, 0x1223, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, 0x0, 0x145042, 0x2c) 3.32404781s ago: executing program 3 (id=1522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) timer_create(0xfd39acc4961eb155, 0x0, &(0x7f0000000140)) 2.411899771s ago: executing program 4 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r3, &(0x7f00000061c0), 0x0) 2.282577428s ago: executing program 3 (id=1524): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40805}, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r3, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) 1.311970695s ago: executing program 4 (id=1525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c00"], 0xbc}}, 0x0) bind$inet(r1, 0x0, 0x0) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'multiq3\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x3, 0x1007, 0xc72d, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x0, 0xa, 0xc, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$COMEDI_RANGEINFO(r3, 0x80106408, &(0x7f0000000140)={0x1, &(0x7f00000000c0)}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) futex(&(0x7f0000000540)=0x2, 0x7, 0x1, 0x0, 0x0, 0x2) writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000280)="8d", 0x1}], 0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000400)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) 1.18014663s ago: executing program 3 (id=1526): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8450}, 0x4000090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(0x3) 1.072656613s ago: executing program 4 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r4}) sendmmsg$inet(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {0x0}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a8", 0x53}], 0x3}}], 0x1, 0x40) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) close(r5) shmctl$SHM_LOCK(0x0, 0xb) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000002900)=ANY=[@ANYRESDEC=r0, @ANYBLOB="445d1787868c769d3e6845f2b88f4587d39de9231107c862a5a297b28ba8f9cf", @ANYRES16, @ANYRESOCT, @ANYBLOB="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"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) 1.014434669s ago: executing program 0 (id=1528): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x9, &(0x7f00000003c0)={0x0, 0x30b9, 0x0, 0x2, 0xe5}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)) r4 = socket$unix(0x1, 0x2, 0x0) r5 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = openat(r6, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x2a0040, 0x13c) getdents64(r7, 0x0, 0xfb) bind$unix(r4, &(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e25}, 0x6e) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, {0xa, 0xe, 0x265, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x3a) r12 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r12, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="0600d70c0955096ba4"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) openat$cgroup(r6, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r11, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) 727.137152ms ago: executing program 3 (id=1529): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 6.274636ms ago: executing program 0 (id=1530): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) 0s ago: executing program 2 (id=1531): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x4330, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000540)) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) kernel console output (not intermixed with test programs): 31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 262.991850][ T32] audit: type=1326 audit(1787729329.623:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 263.001658][ T32] audit: type=1326 audit(1787729329.633:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 263.064187][ T32] audit: type=1326 audit(1787729329.703:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf8db5e90e code=0x7ffc0000 [ 263.112001][ T32] audit: type=1326 audit(1787729329.753:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf8db5e90e code=0x7ffc0000 [ 263.112823][ T32] audit: type=1326 audit(1787729329.763:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf8db5e90e code=0x7ffc0000 [ 263.120631][ T32] audit: type=1326 audit(1787729329.763:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf8db5e90e code=0x7ffc0000 [ 263.121297][ T32] audit: type=1326 audit(1787729329.763:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.325" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faf8db5e90e code=0x7ffc0000 [ 263.285089][ T6993] loop4: detected capacity change from 0 to 1024 [ 263.294620][ T6993] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.306358][ T6993] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 263.306413][ T6993] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 263.510812][ T6999] loop0: detected capacity change from 0 to 16 [ 263.567570][ T6999] erofs (device loop0): mounted with root inode @ nid 36. [ 265.099602][ T7013] netlink: 128 bytes leftover after parsing attributes in process `syz.3.348'. [ 266.009143][ T5720] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 266.608549][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 266.618383][ T5720] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.629942][ T5720] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 266.638420][ T5720] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.638496][ T5720] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.638528][ T5720] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.638557][ T5720] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.638607][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.939941][ T5720] usb 4-1: usb_control_msg returned -71 [ 266.940014][ T5720] usbtmc 4-1:16.0: can't read capabilities [ 266.981427][ T7005] loop1: detected capacity change from 0 to 32768 [ 266.999519][ T5720] usb 4-1: USB disconnect, device number 6 [ 267.082772][ T7005] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.346 (7005) [ 267.196716][ T7024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.759208][ T7005] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 267.759355][ T7005] BTRFS info (device loop1): using crc32c checksum algorithm [ 267.896005][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 267.904341][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 267.921807][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 267.938920][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 267.939192][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 267.939397][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 267.939597][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 267.939803][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 267.940016][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 268.005220][ T7005] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 269.559776][ T7005] BTRFS error (device loop1): open_ctree failed: -ENOMEM [ 270.638903][ T7053] loop1: detected capacity change from 0 to 2048 [ 270.644899][ T7053] EXT4-fs: Ignoring removed i_version option [ 270.699092][ T7053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.699223][ T7053] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.270938][ T7066] net_ratelimit: 126 callbacks suppressed [ 271.271020][ T7066] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.743660][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.372686][ T7073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.213921][ T7083] loop3: detected capacity change from 0 to 128 [ 275.229106][ T7083] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.252248][ T7083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 275.252386][ T7083] System zones: 1-3, 19-19, 35-36 [ 275.290573][ T7083] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 275.312973][ T7083] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.444697][ T7083] syz.3.365 (pid 7083) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 275.657537][ T5619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.089177][ T7090] loop4: detected capacity change from 0 to 16 [ 276.141170][ T7090] erofs (device loop4): mounted with root inode @ nid 36. [ 276.172897][ T7090] netlink: zone id is out of range [ 276.184893][ T7090] netlink: zone id is out of range [ 276.185056][ T7090] netlink: zone id is out of range [ 276.185172][ T7090] netlink: zone id is out of range [ 276.185279][ T7090] netlink: zone id is out of range [ 276.185602][ T7090] netlink: zone id is out of range [ 276.185708][ T7090] netlink: zone id is out of range [ 276.186085][ T7090] netlink: zone id is out of range [ 276.186141][ T7090] netlink: zone id is out of range [ 276.562268][ T7087] loop3: detected capacity change from 0 to 2048 [ 276.854833][ T7087] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 276.939753][ T7087] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 276.950089][ T7087] UDF-fs: Scanning with blocksize 512 failed [ 277.020848][ T7087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.948406][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.100203][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 279.103226][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 279.116853][ T25] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 279.116914][ T25] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 279.116954][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.958265][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 280.068238][ T7121] loop0: detected capacity change from 0 to 16 [ 280.105045][ T7121] erofs (device loop0): mounted with root inode @ nid 36. [ 280.125329][ T7121] net_ratelimit: 59 callbacks suppressed [ 280.125403][ T7121] netlink: zone id is out of range [ 280.131329][ T7121] netlink: zone id is out of range [ 280.131379][ T7121] netlink: zone id is out of range [ 280.136735][ T7121] netlink: zone id is out of range [ 280.136850][ T7121] netlink: zone id is out of range [ 280.137026][ T7121] netlink: zone id is out of range [ 280.137137][ T7121] netlink: zone id is out of range [ 280.142657][ T7121] netlink: zone id is out of range [ 280.142707][ T7121] netlink: zone id is out of range [ 280.142758][ T7121] netlink: zone id is out of range [ 281.800425][ T10] usb 4-1: USB disconnect, device number 7 [ 283.131962][ T7133] loop1: detected capacity change from 0 to 512 [ 284.170043][ T7132] loop0: detected capacity change from 0 to 2048 [ 284.270579][ T7133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.290953][ T7133] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.481186][ T7132] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.508004][ T7132] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 284.508046][ T7132] UDF-fs: Scanning with blocksize 512 failed [ 284.556169][ T7132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.175857][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.920838][ T7150] netlink: 128 bytes leftover after parsing attributes in process `syz.4.386'. [ 286.696924][ T7163] loop1: detected capacity change from 0 to 16 [ 286.726436][ T7163] erofs (device loop1): mounted with root inode @ nid 36. [ 286.748466][ T7163] net_ratelimit: 58 callbacks suppressed [ 286.748554][ T7163] netlink: zone id is out of range [ 286.748727][ T7163] netlink: zone id is out of range [ 286.748875][ T7163] netlink: zone id is out of range [ 286.748977][ T7163] netlink: zone id is out of range [ 286.749080][ T7163] netlink: zone id is out of range [ 286.749297][ T7163] netlink: zone id is out of range [ 286.749335][ T7163] netlink: zone id is out of range [ 286.751232][ T7163] netlink: zone id is out of range [ 286.751296][ T7163] netlink: zone id is out of range [ 286.751348][ T7163] netlink: zone id is out of range [ 286.763026][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 286.845281][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 286.979942][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 287.017890][ T5810] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.080266][ T5810] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 287.090089][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.308757][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 287.311879][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.374460][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 287.374545][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.374591][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.374623][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.374653][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.374700][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.854806][ T7165] fuse: Bad value for 'group_id' [ 287.854844][ T7165] fuse: Bad value for 'group_id' [ 287.921810][ T10] usb 5-1: usb_control_msg returned -71 [ 287.921874][ T10] usbtmc 5-1:16.0: can't read capabilities [ 287.952800][ T10] usb 5-1: USB disconnect, device number 5 [ 289.568113][ T10] usb 1-1: USB disconnect, device number 4 [ 289.586018][ T7177] loop4: detected capacity change from 0 to 512 [ 289.658999][ T7177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.659123][ T7177] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.890846][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.781749][ T7202] fuse: Bad value for 'group_id' [ 291.788358][ T7202] fuse: Bad value for 'group_id' [ 291.954207][ T7206] loop4: detected capacity change from 0 to 16 [ 292.009013][ T7206] erofs (device loop4): mounted with root inode @ nid 36. [ 292.032452][ T7206] net_ratelimit: 58 callbacks suppressed [ 292.032536][ T7206] netlink: zone id is out of range [ 292.032640][ T7206] netlink: zone id is out of range [ 292.032699][ T7206] netlink: zone id is out of range [ 292.032715][ T7206] netlink: zone id is out of range [ 292.032965][ T7206] netlink: zone id is out of range [ 292.033284][ T7206] netlink: zone id is out of range [ 292.033349][ T7206] netlink: zone id is out of range [ 292.033818][ T7206] netlink: zone id is out of range [ 292.033919][ T7206] netlink: zone id is out of range [ 292.033932][ T7206] netlink: zone id is out of range [ 293.097645][ T7213] loop4: detected capacity change from 0 to 16 [ 293.116332][ T7213] erofs (device loop4): mounted with root inode @ nid 36. [ 294.690632][ T7224] loop0: detected capacity change from 0 to 512 [ 294.756529][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.756778][ T7224] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.767296][ T7222] loop4: detected capacity change from 0 to 1024 [ 294.873311][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 294.889097][ T7222] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.004586][ T7235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.427394][ T7218] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.409: lblock 0 mapped to illegal pblock 0 (length 1) [ 295.429509][ T32] kauditd_printk_skb: 84 callbacks suppressed [ 295.429532][ T32] audit: type=1800 audit(1787729362.063:123): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.409" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 295.491365][ T7218] EXT4-fs (loop4): Remounting filesystem read-only [ 295.572640][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.649055][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 295.796241][ T7239] [U] ê [ 295.927002][ T7244] loop0: detected capacity change from 0 to 16 [ 295.992884][ T7244] erofs (device loop0): mounted with root inode @ nid 36. [ 296.331467][ T7245] fuse: Bad value for 'group_id' [ 296.331586][ T7245] fuse: Bad value for 'group_id' [ 297.322107][ T7252] loop4: detected capacity change from 0 to 512 [ 297.343574][ T7254] loop3: detected capacity change from 0 to 16 [ 297.397931][ T7254] erofs (device loop3): mounted with root inode @ nid 36. [ 298.124663][ T7252] EXT4-fs (loop4): 1 truncate cleaned up [ 298.132509][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.616253][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.809367][ T7276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.361026][ T7279] loop3: detected capacity change from 0 to 1024 [ 299.417931][ T7279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 299.418210][ T7279] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.501230][ T7279] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.427: lblock 0 mapped to illegal pblock 0 (length 1) [ 299.515041][ T7279] EXT4-fs (loop3): Remounting filesystem read-only [ 299.529077][ T32] audit: type=1800 audit(1787729366.143:124): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.427" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 299.561181][ T7283] [U] ê [ 299.762689][ T7290] loop2: detected capacity change from 0 to 16 [ 299.788513][ T7290] erofs (device loop2): mounted with root inode @ nid 36. [ 299.811558][ T7290] net_ratelimit: 126 callbacks suppressed [ 299.811767][ T7290] netlink: zone id is out of range [ 299.811874][ T7290] netlink: zone id is out of range [ 299.811930][ T7290] netlink: zone id is out of range [ 299.812086][ T7290] netlink: zone id is out of range [ 299.812149][ T7290] netlink: zone id is out of range [ 299.812462][ T7290] netlink: zone id is out of range [ 299.813749][ T7290] netlink: zone id is out of range [ 299.814188][ T7290] netlink: zone id is out of range [ 299.814288][ T7290] netlink: zone id is out of range [ 299.814346][ T7290] netlink: zone id is out of range [ 301.008258][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.742850][ T7303] loop2: detected capacity change from 0 to 16 [ 301.771977][ T7303] erofs (device loop2): mounted with root inode @ nid 36. [ 301.959395][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.979334][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.979422][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.979523][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.136636][ T7292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.145760][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.241750][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 302.339300][ T7308] loop2: detected capacity change from 0 to 512 [ 302.446280][ T7308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.448047][ T25] usb 5-1: USB disconnect, device number 6 [ 302.467886][ T7308] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.685146][ T7313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.193363][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.866845][ T7330] loop2: detected capacity change from 0 to 256 [ 305.259135][ T7332] loop4: detected capacity change from 0 to 40427 [ 305.267868][ T7332] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 305.267895][ T7332] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 305.393235][ T7332] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 305.413959][ T7332] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 305.414004][ T7332] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 305.456530][ T7332] syz.4.446: attempt to access beyond end of device [ 305.456530][ T7332] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 305.482686][ T7332] syz.4.446: attempt to access beyond end of device [ 305.482686][ T7332] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 305.761563][ T7346] loop1: detected capacity change from 0 to 16 [ 305.788930][ T7346] erofs (device loop1): mounted with root inode @ nid 36. [ 306.243050][ T7344] loop3: detected capacity change from 0 to 2048 [ 306.673888][ T7344] loop3: p3 < > p4 < > [ 306.707220][ T7344] loop3: partition table partially beyond EOD, truncated [ 306.737863][ T7350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.825283][ T7344] loop3: p3 start 4284289 is beyond EOD, truncated [ 307.454397][ T7355] loop1: detected capacity change from 0 to 512 [ 307.561060][ T7355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.561188][ T7355] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.200645][ T7360] IPVS: Scheduler module ip_vs_sip not found [ 309.241467][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.596672][ T7373] pimreg0: tun_chr_ioctl cmd 1074025677 [ 309.596911][ T7373] pimreg0: linktype set to 773 [ 309.798405][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 309.866595][ T7378] loop0: detected capacity change from 0 to 16 [ 309.901667][ T7378] erofs (device loop0): mounted with root inode @ nid 36. [ 309.922968][ T7378] net_ratelimit: 58 callbacks suppressed [ 309.923025][ T7378] netlink: zone id is out of range [ 309.923092][ T7378] netlink: zone id is out of range [ 309.923106][ T7378] netlink: zone id is out of range [ 309.923171][ T7378] netlink: zone id is out of range [ 309.923294][ T7378] netlink: zone id is out of range [ 309.923551][ T7378] netlink: zone id is out of range [ 309.923609][ T7378] netlink: zone id is out of range [ 309.923933][ T7378] netlink: zone id is out of range [ 309.923985][ T7378] netlink: zone id is out of range [ 309.924038][ T7378] netlink: zone id is out of range [ 310.185257][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 310.243118][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 310.358559][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.358624][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.320815][ T25] usb 3-1: config 0 descriptor?? [ 311.819350][ T25] ntrig 0003:1B96:0008.0002: unexpected long global item [ 311.832851][ T25] ntrig 0003:1B96:0008.0002: parse failed [ 311.833178][ T25] ntrig 0003:1B96:0008.0002: probe with driver ntrig failed with error -22 [ 312.517491][ T7391] loop0: detected capacity change from 0 to 16 [ 312.562847][ T7391] erofs (device loop0): mounted with root inode @ nid 36. [ 312.722662][ T25] usb 3-1: USB disconnect, device number 10 [ 313.290636][ T7397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.859695][ T7407] loop0: detected capacity change from 0 to 512 [ 316.098109][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.107023][ T7407] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.352181][ T7422] loop4: detected capacity change from 0 to 16 [ 316.416797][ T7422] erofs (device loop4): mounted with root inode @ nid 36. [ 316.439034][ T7422] net_ratelimit: 126 callbacks suppressed [ 316.439062][ T7422] netlink: zone id is out of range [ 316.439075][ T7422] netlink: zone id is out of range [ 316.439128][ T7422] netlink: zone id is out of range [ 316.439446][ T7422] netlink: zone id is out of range [ 316.439976][ T7422] netlink: zone id is out of range [ 316.440305][ T7422] netlink: zone id is out of range [ 316.440386][ T7422] netlink: zone id is out of range [ 316.441202][ T7422] netlink: zone id is out of range [ 316.441252][ T7422] netlink: zone id is out of range [ 316.441309][ T7422] netlink: zone id is out of range [ 317.300387][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.300478][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.407478][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.550166][ T5810] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 317.793958][ T7430] loop4: detected capacity change from 0 to 128 [ 317.814756][ T7430] FAT-fs (loop4): data area starts beyond volume (33 > 0) [ 317.814796][ T7430] FAT-fs (loop4): Can't find a valid FAT filesystem [ 317.961198][ T7426] fido_id[7426]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.059780][ T7430] loop4: detected capacity change from 0 to 256 [ 318.615759][ T7439] loop3: detected capacity change from 0 to 16 [ 318.642040][ T7439] erofs (device loop3): mounted with root inode @ nid 36. [ 319.341583][ T7443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.809470][ T7450] loop3: detected capacity change from 0 to 16 [ 320.856533][ T7450] erofs (device loop3): mounted with root inode @ nid 36. [ 322.667296][ T7463] loop2: detected capacity change from 0 to 512 [ 322.750580][ T7465] loop4: detected capacity change from 0 to 16 [ 322.908861][ T7465] erofs (device loop4): mounted with root inode @ nid 36. [ 322.930290][ T7465] net_ratelimit: 126 callbacks suppressed [ 322.930386][ T7465] netlink: zone id is out of range [ 322.936300][ T7465] netlink: zone id is out of range [ 322.941613][ T7465] netlink: zone id is out of range [ 322.941667][ T7465] netlink: zone id is out of range [ 322.941770][ T7465] netlink: zone id is out of range [ 322.947198][ T7465] netlink: zone id is out of range [ 322.947211][ T7465] netlink: zone id is out of range [ 322.952650][ T7465] netlink: zone id is out of range [ 322.952713][ T7465] netlink: zone id is out of range [ 322.952724][ T7465] netlink: zone id is out of range [ 323.615587][ T7463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.615726][ T7463] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.984593][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.317472][ T7482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.761992][ T7481] loop0: detected capacity change from 0 to 512 [ 327.902723][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.902928][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.930581][ T25] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 328.120502][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.460584][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.485280][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.991210][ T5940] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.991293][ T5940] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.991353][ T5940] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.991505][ T5940] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.287287][ T7502] loop2: detected capacity change from 0 to 16 [ 329.309529][ T7502] erofs (device loop2): mounted with root inode @ nid 36. [ 329.330178][ T7502] net_ratelimit: 58 callbacks suppressed [ 329.330275][ T7502] netlink: zone id is out of range [ 329.330377][ T7502] netlink: zone id is out of range [ 329.330434][ T7502] netlink: zone id is out of range [ 329.330531][ T7502] netlink: zone id is out of range [ 329.330651][ T7502] netlink: zone id is out of range [ 329.330916][ T7502] netlink: zone id is out of range [ 329.330953][ T7502] netlink: zone id is out of range [ 329.331412][ T7502] netlink: zone id is out of range [ 329.331518][ T7502] netlink: zone id is out of range [ 329.331631][ T7502] netlink: zone id is out of range [ 330.645453][ T7511] loop4: detected capacity change from 0 to 16 [ 330.661995][ T7511] erofs (device loop4): mounted with root inode @ nid 36. [ 332.734570][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.186690][ T7525] loop1: detected capacity change from 0 to 128 [ 333.347246][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 333.528327][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 333.537955][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 333.554255][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.554306][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.554365][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.613157][ T9] usb 1-1: config 0 descriptor?? [ 333.639948][ T9] hub 1-1:0.0: USB hub found [ 334.193991][ T9] hub 1-1:0.0: 1 port detected [ 334.827488][ T1556] hub 1-1:0.0: activate --> -90 [ 335.007717][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.008487][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.055477][ T5720] usb 1-1: USB disconnect, device number 5 [ 335.064347][ T3386] usb 1-1: Failed to suspend device, error -71 [ 335.351240][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.375843][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.824214][ T7541] loop4: detected capacity change from 0 to 16 [ 335.862115][ T7541] erofs (device loop4): mounted with root inode @ nid 36. [ 335.881573][ T7541] net_ratelimit: 58 callbacks suppressed [ 335.881621][ T7541] netlink: zone id is out of range [ 335.881690][ T7541] netlink: zone id is out of range [ 335.881801][ T7541] netlink: zone id is out of range [ 335.881919][ T7541] netlink: zone id is out of range [ 335.882017][ T7541] netlink: zone id is out of range [ 335.882274][ T7541] netlink: zone id is out of range [ 335.882389][ T7541] netlink: zone id is out of range [ 335.882698][ T7541] netlink: zone id is out of range [ 335.882712][ T7541] netlink: zone id is out of range [ 335.882779][ T7541] netlink: zone id is out of range [ 337.199459][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.201992][ T3386] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.202106][ T3386] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.202208][ T3386] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.932266][ T7554] MTRR 1 not used [ 339.453463][ T7568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.771029][ T7575] loop4: detected capacity change from 0 to 128 [ 344.072281][ T7597] loop4: detected capacity change from 0 to 512 [ 344.404933][ T7604] loop3: detected capacity change from 0 to 16 [ 344.435647][ T7604] erofs (device loop3): mounted with root inode @ nid 36. [ 344.465908][ T7604] net_ratelimit: 58 callbacks suppressed [ 344.466002][ T7604] netlink: zone id is out of range [ 344.466109][ T7604] netlink: zone id is out of range [ 344.466222][ T7604] netlink: zone id is out of range [ 344.466329][ T7604] netlink: zone id is out of range [ 344.466436][ T7604] netlink: zone id is out of range [ 344.466703][ T7604] netlink: zone id is out of range [ 344.466760][ T7604] netlink: zone id is out of range [ 344.467081][ T7604] netlink: zone id is out of range [ 344.467139][ T7604] netlink: zone id is out of range [ 344.467191][ T7604] netlink: zone id is out of range [ 346.067652][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.455957][ T7622] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 349.232770][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.531'. [ 349.385565][ T7635] loop4: detected capacity change from 0 to 128 [ 350.058453][ T7639] loop4: detected capacity change from 0 to 8192 [ 355.339886][ T7670] loop1: detected capacity change from 0 to 1024 [ 355.389258][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 355.389387][ T7670] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.424346][ T7670] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.545: lblock 0 mapped to illegal pblock 0 (length 1) [ 355.439631][ T32] audit: type=1800 audit(1787729422.063:125): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.545" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 355.446932][ T7670] EXT4-fs (loop1): Remounting filesystem read-only [ 355.844267][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 355.916405][ T7678] loop4: detected capacity change from 0 to 128 [ 356.691353][ T7681] loop4: detected capacity change from 0 to 8192 [ 357.470201][ T7685] syz.4.548 uses obsolete (PF_INET,SOCK_PACKET) [ 357.602068][ T7687] binder: 7686:7687 ioctl c0306201 0 returned -14 [ 358.567130][ T7694] loop1: detected capacity change from 0 to 2048 [ 360.096583][ T7701] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.347082][ T7703] loop4: detected capacity change from 0 to 256 [ 360.368008][ T7694] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 360.395921][ T7694] Remounting filesystem read-only [ 360.406862][ T7694] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 360.429607][ T7704] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 360.446322][ T7694] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 360.462769][ T7694] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 360.563761][ T7704] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 363.079400][ T7717] loop1: detected capacity change from 0 to 1024 [ 363.740182][ T7719] loop3: detected capacity change from 0 to 131072 [ 363.750994][ T7719] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 363.751032][ T7719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 363.758813][ T7719] F2FS-fs (loop3): invalid crc value [ 363.784164][ T7717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 363.799918][ T7717] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.888612][ T7719] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 363.906681][ T7719] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 363.906713][ T7719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 363.967113][ T7716] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.557: lblock 0 mapped to illegal pblock 0 (length 1) [ 363.981515][ T32] audit: type=1800 audit(1787729430.603:126): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.557" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 364.006421][ T7716] EXT4-fs (loop1): Remounting filesystem read-only [ 364.495865][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.882405][ T7734] tipc: Can't bind to reserved service type 2 [ 365.111988][ T7738] loop1: detected capacity change from 0 to 1024 [ 365.131394][ T7738] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.156005][ T7738] EXT4-fs: Ignoring removed orlov option [ 365.266687][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.487559][ T7730] ftl_cs: FTL header not found. [ 366.326260][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.720670][ T7730] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [65] [ 367.030224][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.607450][ T7762] loop1: detected capacity change from 0 to 4096 [ 370.685165][ T7762] ntfs3(loop1): Failed to load $Extend (-22). [ 370.691961][ T7762] ntfs3(loop1): Failed to initialize $Extend. [ 370.988006][ T32] audit: type=1800 audit(1787729437.621:127): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 372.318344][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 372.539879][ T7783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.555803][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 372.568646][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 372.579308][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.668317][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 372.675650][ T10] pvrusb2: ********** [ 372.679785][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 372.690106][ T10] pvrusb2: Important functionality might not be entirely working. [ 372.698027][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 372.709597][ T10] pvrusb2: ********** [ 372.929954][ T2363] pvrusb2: Invalid write control endpoint [ 373.195203][ T5810] usb 5-1: USB disconnect, device number 7 [ 373.222466][ T2363] pvrusb2: Invalid write control endpoint [ 373.222517][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 373.232205][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 373.232240][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 373.232357][ T2363] pvrusb2: Device being rendered inoperable [ 373.232513][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 373.232728][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 373.319769][ T2363] pvrusb2: Attached sub-driver cx25840 [ 373.321638][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 373.321671][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 375.364467][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 375.824650][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.857171][ T7814] loop4: detected capacity change from 0 to 4096 [ 375.893653][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 375.894354][ T7814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 375.962257][ T7814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.079164][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.084927][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.085052][ T31] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.085163][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.121284][ T7811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 376.154091][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.332903][ T5810] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 376.490457][ T31] usb 1-1: USB disconnect, device number 6 [ 376.529194][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 376.533779][ T5810] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 376.547677][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.581042][ T7822] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 376.596239][ T5810] pvrusb2: Hardware description: Terratec Grabster AV400 [ 376.596300][ T5810] pvrusb2: ********** [ 376.596312][ T5810] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 376.596329][ T5810] pvrusb2: Important functionality might not be entirely working. [ 376.596338][ T5810] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 376.596350][ T5810] pvrusb2: ********** [ 376.787475][ T7814] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 376.810395][ T2363] pvrusb2: Invalid write control endpoint [ 377.044541][ T1225] usb 2-1: USB disconnect, device number 4 [ 377.076286][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.087820][ T2363] pvrusb2: Invalid write control endpoint [ 377.087860][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 377.094800][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 377.094833][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 377.094865][ T2363] pvrusb2: Device being rendered inoperable [ 377.094951][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 377.095064][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 377.185467][ T2363] pvrusb2: Attached sub-driver cx25840 [ 377.185525][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 377.185565][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 377.628316][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 377.811855][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 377.825127][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.853332][ T10] usb 4-1: config 0 descriptor?? [ 377.873229][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 378.341433][ T10] gspca_sunplus: reg_w_riv err -71 [ 378.341521][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 378.372563][ T10] usb 4-1: USB disconnect, device number 8 [ 378.527509][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 378.742669][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749178][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.983243][ T7847] syzkaller0: entered promiscuous mode [ 378.983286][ T7847] syzkaller0: entered allmulticast mode [ 379.200674][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.358579][ T1225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.520096][ T1225] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.543272][ T1225] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.543341][ T1225] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 380.543383][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.806631][ T7858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.816094][ T1225] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.067503][ T1225] usb 2-1: USB disconnect, device number 5 [ 384.805914][ T7883] loop3: detected capacity change from 0 to 1024 [ 384.961545][ T7883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 384.979095][ T7883] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.041844][ T32] audit: type=1800 audit(1787729451.691:128): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 385.085397][ T7883] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.613: lblock 0 mapped to illegal pblock 0 (length 1) [ 385.114893][ T7883] EXT4-fs (loop3): Remounting filesystem read-only [ 385.131876][ T5743] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 385.265059][ T7896] syzkaller0: entered promiscuous mode [ 385.265111][ T7896] syzkaller0: entered allmulticast mode [ 385.556880][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 386.125929][ T7907] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 389.278346][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 389.473360][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.483377][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.483414][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 389.483455][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.531101][ T7926] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.565919][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.036164][ T9] usb 1-1: USB disconnect, device number 7 [ 390.136995][ T7937] loop1: detected capacity change from 0 to 1024 [ 391.822398][ T7937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 391.825827][ T7937] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.907461][ T32] audit: type=1800 audit(1787729458.551:129): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.629" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 391.963991][ T7937] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.995294][ T7937] EXT4-fs (loop1): Remounting filesystem read-only [ 392.386148][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 392.619747][ T7961] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 392.655109][ T7963] loop1: detected capacity change from 0 to 512 [ 392.725062][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.725155][ T7963] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.956021][ T7963] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 393.194789][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.599674][ T7984] binder: 7973:7984 unknown command 0 [ 395.599778][ T7984] binder: 7973:7984 ioctl c0306201 200000004a40 returned -22 [ 396.867585][ T7987] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 400.633952][ T8005] loop4: detected capacity change from 0 to 4096 [ 400.653695][ T8015] MTRR 1 not used [ 401.537362][ T8005] ntfs3(loop4): Failed to load $Extend (-22). [ 401.537414][ T8005] ntfs3(loop4): Failed to initialize $Extend. [ 401.747673][ T8005] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 401.747757][ T8005] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 401.788652][ T8005] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 402.836219][ T8024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.650'. [ 403.479125][ T8033] binder: 8029:8033 unknown command 0 [ 403.479220][ T8033] binder: 8029:8033 ioctl c0306201 200000004a40 returned -22 [ 404.528274][ T1225] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 404.635319][ T8037] loop1: detected capacity change from 0 to 4096 [ 404.688234][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 404.697417][ T1225] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 404.719107][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.719154][ T1225] usb 4-1: Product: syz [ 404.719190][ T1225] usb 4-1: Manufacturer: syz [ 404.719211][ T1225] usb 4-1: SerialNumber: syz [ 404.747445][ T1225] usb 4-1: config 0 descriptor?? [ 404.763503][ T1225] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 404.775403][ T1225] dvb-usb: bulk message failed: -22 (4/0) [ 404.791699][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 404.791868][ T1225] dvb-usb: bulk message failed: -22 (5/0) [ 404.791890][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 404.894571][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.904159][ T1225] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 404.904259][ T1225] usb 4-1: media controller created [ 405.030277][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.639658][ T1225] usb 4-1: selecting invalid altsetting 3 [ 405.639712][ T1225] ttusb2: set interface to alts=3 failed [ 405.692662][ T8028] dvb-usb: bulk message failed: -22 (7/0) [ 405.692703][ T8028] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 405.715811][ T8028] ttusb2: i2c transfer failed. [ 405.901453][ T1225] DVB: Unable to find symbol tda10086_attach() [ 405.901507][ T1225] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 405.904166][ T1225] dvb-usb: bulk message failed: -22 (4/0) [ 405.904218][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 405.904603][ T1225] dvb-usb: bulk message failed: -22 (5/0) [ 405.904653][ T1225] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 405.904831][ T1225] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 407.219332][ T10] usb 4-1: USB disconnect, device number 9 [ 407.327175][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 409.207852][ T8071] binder: 8068:8071 unknown command 0 [ 409.207948][ T8071] binder: 8068:8071 ioctl c0306201 200000004a40 returned -22 [ 412.276651][ T8084] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 413.078852][ T8087] loop4: detected capacity change from 0 to 64 [ 413.888236][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 414.048302][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 414.050178][ T10] usb 5-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=98.62 [ 414.056476][ T10] usb 5-1: config 0 has an invalid interface number: 118 but max is 0 [ 414.056560][ T10] usb 5-1: config 0 has no interface number 0 [ 414.056644][ T10] usb 5-1: config 0 interface 118 has no altsetting 0 [ 414.073789][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.073870][ T10] usb 5-1: Product: syz [ 414.073906][ T10] usb 5-1: Manufacturer: syz [ 414.073949][ T10] usb 5-1: SerialNumber: syz [ 414.104515][ T10] usb 5-1: config 0 descriptor?? [ 414.133688][ T8105] fuse: fd is not a fuse device [ 414.341642][ T8101] mmap: syz.4.677 (8101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 414.356571][ T10] usb-storage 5-1:0.118: USB Mass Storage device detected [ 414.438892][ T10] usb-storage 5-1:0.118: Quirks match for vid 07cf pid 1001: a [ 414.539210][ T10] usb 5-1: USB disconnect, device number 8 [ 414.792651][ T8113] loop1: detected capacity change from 0 to 32768 [ 414.806540][ T8113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.669 (8113) [ 414.832863][ T8113] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.832923][ T8113] BTRFS info (device loop1): using sha256 checksum algorithm [ 414.966446][ T8113] BTRFS info (device loop1): enabling ssd optimizations [ 414.966544][ T8113] BTRFS info (device loop1): turning on sync discard [ 414.966565][ T8113] BTRFS info (device loop1): enabling free space tree [ 414.966700][ T8113] BTRFS info (device loop1): use zlib compression, level 3 [ 415.008701][ T32] audit: type=1800 audit(1787729481.661:130): pid=8113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 415.093149][ T32] audit: type=1800 audit(1787729481.741:131): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 415.093217][ T32] audit: type=1800 audit(1787729481.741:132): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.669" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 417.040152][ T5743] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 417.084741][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 417.208606][ T5743] usb 1-1: Using ep0 maxpacket: 32 [ 417.226939][ T5743] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 417.230813][ T8154] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 417.285435][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.285884][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.695940][ T8154] fuse: Bad value for 'fd' [ 417.798278][ T5743] usb 1-1: config 0 descriptor?? [ 417.917111][ T5743] hub 1-1:0.0: bad descriptor, ignoring hub [ 417.917169][ T5743] hub 1-1:0.0: probe with driver hub failed with error -5 [ 418.380278][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 418.540974][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 418.553576][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.562024][ T9] usb 4-1: Product: syz [ 418.566321][ T9] usb 4-1: Manufacturer: syz [ 418.571108][ T9] usb 4-1: SerialNumber: syz [ 418.582566][ T9] usb 4-1: config 0 descriptor?? [ 418.599995][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 419.031584][ T9] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 419.419736][ T9] usb 4-1: USB disconnect, device number 10 [ 419.459332][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 419.598386][ T10] usb 2-1: device descriptor read/64, error -71 [ 419.988232][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 420.140651][ T10] usb 2-1: device descriptor read/64, error -71 [ 420.258696][ T10] usb usb2-port1: attempt power cycle [ 420.330024][ T5743] usb 1-1: USB disconnect, device number 8 [ 420.608268][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 420.629431][ T10] usb 2-1: device descriptor read/8, error -71 [ 420.677673][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.702'. [ 420.880049][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 420.910932][ T10] usb 2-1: device descriptor read/8, error -71 [ 420.923984][ T8198] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 421.019428][ T10] usb usb2-port1: unable to enumerate USB device [ 422.246258][ T8208] loop1: detected capacity change from 0 to 256 [ 422.256537][ T8208] exfat: Deprecated parameter 'namecase' [ 422.256603][ T8208] exfat: Deprecated parameter 'namecase' [ 422.319770][ T8208] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 422.748259][ T5743] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 423.168230][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 423.169732][ T5743] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.171747][ T5743] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.171801][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.653105][ T5743] usb 5-1: config 0 descriptor?? [ 423.742918][ T5743] hub 5-1:0.0: bad descriptor, ignoring hub [ 423.742968][ T5743] hub 5-1:0.0: probe with driver hub failed with error -5 [ 424.032980][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'. [ 425.748460][ T8240] capability: warning: `syz.1.716' uses deprecated v2 capabilities in a way that may be insecure [ 425.888761][ T9] usb 5-1: USB disconnect, device number 9 [ 426.001065][ T8247] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 426.468608][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 426.629226][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.641490][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.653103][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.653154][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.681265][ T8256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 426.694849][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.987874][ T1225] usb 1-1: USB disconnect, device number 9 [ 427.110550][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.725'. [ 431.408221][ T5352] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 431.568258][ T5352] usb 5-1: Using ep0 maxpacket: 32 [ 431.574561][ T5352] usb 5-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=98.62 [ 431.587008][ T5352] usb 5-1: config 0 has an invalid interface number: 118 but max is 0 [ 431.587049][ T5352] usb 5-1: config 0 has no interface number 0 [ 431.587100][ T5352] usb 5-1: config 0 interface 118 has no altsetting 0 [ 431.611664][ T5352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.611708][ T5352] usb 5-1: Product: syz [ 431.611741][ T5352] usb 5-1: Manufacturer: syz [ 431.611762][ T5352] usb 5-1: SerialNumber: syz [ 431.638318][ T5352] usb 5-1: config 0 descriptor?? [ 431.855646][ T5352] usb-storage 5-1:0.118: USB Mass Storage device detected [ 431.880631][ T5352] usb-storage 5-1:0.118: Quirks match for vid 07cf pid 1001: a [ 431.955462][ T5352] usb 5-1: USB disconnect, device number 10 [ 432.078224][ T1225] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 432.234528][ T1225] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 432.237756][ T1225] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.237849][ T1225] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 432.237949][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.277727][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'. [ 432.292256][ T8305] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 432.328527][ T1225] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.609980][ T1225] usb 4-1: USB disconnect, device number 11 [ 433.152147][ T8323] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 436.361441][ T8340] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 436.622955][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 436.838266][ T1225] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 437.073302][ T1225] usb 5-1: Using ep0 maxpacket: 32 [ 437.104703][ T1225] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.187475][ T1225] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.187550][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.619190][ T1225] usb 5-1: config 0 descriptor?? [ 437.719998][ T1225] hub 5-1:0.0: bad descriptor, ignoring hub [ 437.720050][ T1225] hub 5-1:0.0: probe with driver hub failed with error -5 [ 437.735726][ T1225] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 438.243785][ T8364] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 439.819422][ T1225] usb 5-1: USB disconnect, device number 11 [ 440.182885][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.191435][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.410895][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 442.516533][ T8377] loop4: detected capacity change from 0 to 32768 [ 442.571292][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 442.580711][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 442.597938][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 442.609051][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.609108][ T9] usb 1-1: config 0 has no interface number 0 [ 442.609156][ T9] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.645854][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.645887][ T9] usb 1-1: Product: syz [ 442.645912][ T9] usb 1-1: Manufacturer: syz [ 442.645925][ T9] usb 1-1: SerialNumber: syz [ 442.671538][ T8377] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.694989][ T9] usb 1-1: config 0 descriptor?? [ 442.729540][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 442.832904][ T8377] XFS (loop4): Ending clean mount [ 442.873218][ T8377] XFS (loop4): Quotacheck needed: Please wait. [ 442.976946][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 442.985182][ T9] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 443.006099][ T9] usb 1-1: USB disconnect, device number 10 [ 443.206924][ T8377] XFS (loop4): Quotacheck: Done. [ 443.316286][ T5631] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 444.217220][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 444.458819][ T8429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 448.280428][ T8453] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 448.301392][ T8456] loop4: detected capacity change from 0 to 2048 [ 448.313741][ T8456] EXT4-fs: Ignoring removed i_version option [ 448.387117][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.387342][ T8456] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.443980][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 448.930843][ T8463] net_ratelimit: 58 callbacks suppressed [ 448.930921][ T8463] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 449.584974][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.444223][ T8510] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 455.822523][ T8518] tipc: Failed to remove unknown binding: 66,0,0/0:2308724393/2308724394 [ 455.824925][ T8518] tipc: Failed to remove unknown binding: 66,0,0/0:2308724393/2308724394 [ 455.828445][ T8518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'. [ 455.829087][ T8518] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 455.829619][ T8518] netlink: 'syz.2.798': attribute type 2 has an invalid length. [ 455.829683][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 456.514958][ T8512] binder: 8495:8512 unknown command 0 [ 456.515005][ T8512] binder: 8495:8512 ioctl c0306201 200000004a40 returned -22 [ 462.626149][ T8556] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 465.112110][ T8573] fuse: fd is not a fuse device [ 465.407814][ T8580] loop3: detected capacity change from 0 to 512 [ 465.483895][ T8580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.484121][ T8580] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.815195][ T5619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.945077][ T8586] binder: 8566:8586 unknown command 0 [ 465.945157][ T8586] binder: 8566:8586 ioctl c0306201 200000004a40 returned -22 [ 466.142440][ T8593] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 466.440020][ T8603] loop4: detected capacity change from 0 to 16 [ 466.473809][ T8603] erofs (device loop4): mounted with root inode @ nid 36. [ 466.521358][ T8599] netlink: zone id is out of range [ 466.521416][ T8599] netlink: zone id is out of range [ 466.523630][ T8599] netlink: zone id is out of range [ 466.523665][ T8599] netlink: zone id is out of range [ 466.523769][ T8599] netlink: zone id is out of range [ 466.523792][ T8599] netlink: zone id is out of range [ 466.523939][ T8599] netlink: zone id is out of range [ 466.523961][ T8599] netlink: zone id is out of range [ 466.523984][ T8599] netlink: zone id is out of range [ 466.524014][ T8599] netlink: zone id is out of range [ 470.884520][ T8629] tipc: Failed to remove unknown binding: 66,0,0/0:3920465452/3920465453 [ 470.886465][ T8629] tipc: Failed to remove unknown binding: 66,0,0/0:3920465452/3920465453 [ 473.122850][ T8646] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 473.550590][ T8649] binder: 8640:8649 unknown command 0 [ 473.556267][ T8649] binder: 8640:8649 ioctl c0306201 200000004a40 returned -22 [ 485.073055][ T8730] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 485.173562][ T8724] loop3: detected capacity change from 0 to 32768 [ 485.207094][ T8724] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 485.300098][ T8724] XFS (loop3): Ending clean mount [ 486.941117][ T5619] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 488.909327][ T8773] syzkaller0: entered promiscuous mode [ 488.909373][ T8773] syzkaller0: entered allmulticast mode [ 488.985752][ T8777] fuse: fd is not a fuse device [ 489.062271][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 489.208367][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 489.209922][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 489.232525][ T9] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 489.232577][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.232600][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 489.232674][ T9] usb 2-1: config 0 has no interface number 0 [ 489.280365][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.280421][ T9] usb 2-1: Product: syz [ 489.280456][ T9] usb 2-1: Manufacturer: syz [ 489.280477][ T9] usb 2-1: SerialNumber: syz [ 489.321804][ T9] usb 2-1: config 0 descriptor?? [ 489.440407][ T9] viperboard 2-1:0.61: version 0.00 found at bus 002 address 010 [ 489.453568][ T8788] fuse: Unknown parameter '0xffffffffffffffff' [ 489.548293][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 489.548342][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 489.579778][ T8791] loop4: detected capacity change from 0 to 256 [ 489.588697][ T8791] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 489.942232][ T9] usb 2-1: USB disconnect, device number 10 [ 490.882041][ T8804] loop4: detected capacity change from 0 to 128 [ 491.159747][ T8807] loop4: detected capacity change from 0 to 8192 [ 492.523702][ T8827] loop4: detected capacity change from 0 to 256 [ 492.533980][ T8827] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 492.555793][ T8825] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 494.996328][ T8845] loop3: detected capacity change from 0 to 2048 [ 495.129273][ T8848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.148221][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 495.299726][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 495.328309][ T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 495.339585][ T9] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 495.339629][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 495.339664][ T9] usb 5-1: config 0 has no interface number 0 [ 495.366155][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.366214][ T9] usb 5-1: Product: syz [ 495.366246][ T9] usb 5-1: Manufacturer: syz [ 495.366267][ T9] usb 5-1: SerialNumber: syz [ 495.379405][ T8845] NILFS (loop3): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 495.379526][ T8845] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=13) [ 495.414089][ T9] usb 5-1: config 0 descriptor?? [ 495.538759][ T9] viperboard 5-1:0.61: version 0.00 found at bus 005 address 012 [ 495.591661][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 495.591716][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 495.614446][ T8845] Remounting filesystem read-only [ 495.614563][ T8845] NILFS (loop3): error -5 truncating bmap (ino=13) [ 495.676186][ T9] usb 5-1: USB disconnect, device number 12 [ 495.832192][ T5619] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 496.560832][ T8872] loop4: detected capacity change from 0 to 256 [ 496.567944][ T8872] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 496.897041][ T8874] fuse: fd is not a fuse device [ 497.448688][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.906'. [ 497.455682][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.906'. [ 498.238731][ T32] audit: type=1326 audit(1787729564.881:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.238819][ T32] audit: type=1326 audit(1787729564.881:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.611080][ T32] audit: type=1326 audit(1787729565.241:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.611138][ T32] audit: type=1326 audit(1787729565.261:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.617381][ T32] audit: type=1326 audit(1787729565.261:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.617435][ T32] audit: type=1326 audit(1787729565.261:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.617481][ T32] audit: type=1326 audit(1787729565.261:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.632604][ T32] audit: type=1326 audit(1787729565.281:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.632660][ T32] audit: type=1326 audit(1787729565.281:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.639458][ T32] audit: type=1326 audit(1787729565.291:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.3.908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faf8db9e0d9 code=0x7ffc0000 [ 498.944550][ T8888] loop4: detected capacity change from 0 to 32768 [ 499.268343][ T8888] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 499.276314][ T8888] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.680914][ T8888] XFS (loop4): Ending clean mount [ 499.687626][ T8888] XFS (loop4): Quotacheck needed: Please wait. [ 499.799747][ T8911] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 500.069057][ T8888] XFS (loop4): Quotacheck: Done. [ 500.362596][ T1225] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 500.453785][ T5631] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.872898][ T1225] usb 1-1: Using ep0 maxpacket: 32 [ 501.874045][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.888162][ T1225] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 501.898657][ T1225] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 501.898703][ T1225] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 501.898747][ T1225] usb 1-1: config 0 has no interface number 0 [ 502.400079][ T1225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.400146][ T1225] usb 1-1: Product: syz [ 502.400185][ T1225] usb 1-1: Manufacturer: syz [ 502.400207][ T1225] usb 1-1: SerialNumber: syz [ 502.467699][ T1225] usb 1-1: config 0 descriptor?? [ 502.554991][ T8922] loop3: detected capacity change from 0 to 256 [ 502.564374][ T8922] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 502.664609][ T8921] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 502.952090][ T1225] usb 1-1: can't set config #0, error -71 [ 502.956762][ T1225] usb 1-1: USB disconnect, device number 11 [ 504.034628][ T8935] loop4: detected capacity change from 0 to 128 [ 505.648196][ T1556] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 505.811743][ T1556] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 505.831681][ T1556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.831728][ T1556] usb 5-1: Product: syz [ 505.831761][ T1556] usb 5-1: Manufacturer: syz [ 505.831782][ T1556] usb 5-1: SerialNumber: syz [ 507.388477][ T8969] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 508.632345][ T1556] net_ratelimit: 57 callbacks suppressed [ 508.640185][ T1556] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 508.640290][ T1556] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 508.640331][ T1556] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 508.699681][ T1556] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 508.725999][ T1556] usb 5-1: USB disconnect, device number 13 [ 508.837656][ T8974] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 508.869122][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 508.894019][ T8980] macvlan1: entered allmulticast mode [ 508.975455][ T8980] syz.3.931 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 508.988159][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(full) [ 508.988190][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.988214][ T8980] Call Trace: [ 508.988228][ T8980] [ 508.988238][ T8980] dump_stack_lvl+0xe8/0x150 [ 508.988281][ T8980] dump_header+0xd3/0x4b0 [ 508.988315][ T8980] oom_kill_process+0x3ab/0x9e0 [ 508.988351][ T8980] out_of_memory+0x1064/0x1480 [ 508.988378][ T8980] ? try_charge_memcg+0xc32/0x15e0 [ 508.988422][ T8980] ? __pfx_out_of_memory+0x10/0x10 [ 508.988448][ T8980] ? do_raw_spin_unlock+0xf5/0x200 [ 508.988493][ T8980] try_charge_memcg+0xcdf/0x15e0 [ 508.988543][ T8980] ? __pfx_try_charge_memcg+0x10/0x10 [ 508.988581][ T8980] ? percpu_ref_tryget+0x15/0x180 [ 508.988614][ T8980] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 508.988647][ T8980] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 508.988673][ T8980] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 508.988701][ T8980] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 508.988751][ T8980] __kmalloc_noprof+0x3d4/0x720 [ 508.988789][ T8980] ? __kmalloc_noprof+0x1ab/0x720 [ 508.988823][ T8980] ? __register_sysctl_table+0x6f/0x1370 [ 508.988857][ T8980] ? __register_sysctl_table+0x6f/0x1370 [ 508.988890][ T8980] __register_sysctl_table+0x6f/0x1370 [ 508.988918][ T8980] ? register_net_sysctl_sz+0x2ac/0x3f0 [ 508.988957][ T8980] __devinet_sysctl_register+0x36d/0x470 [ 508.988998][ T8980] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 508.989029][ T8980] ? rtnl_configure_link+0x2f5/0x510 [ 508.989060][ T8980] ? rtnl_newlink_create+0x343/0x7b0 [ 508.989090][ T8980] ? rtnl_newlink+0x166d/0x1c30 [ 508.989110][ T8980] ? rtnetlink_rcv_msg+0x802/0xc00 [ 508.989132][ T8980] ? netlink_unicast+0x7bd/0x940 [ 508.989155][ T8980] ? netlink_sendmsg+0x813/0xb40 [ 508.989183][ T8980] ? sock_sendmsg_nosec+0x13a/0x180 [ 508.989213][ T8980] ? lockdep_hardirqs_on+0x7b/0x110 [ 508.989247][ T8980] ? neigh_parms_alloc+0x404/0x500 [ 508.989288][ T8980] devinet_sysctl_register+0x187/0x200 [ 508.989319][ T8980] inetdev_init+0x29e/0x4d0 [ 508.989347][ T8980] inetdev_event+0x307/0x15e0 [ 508.989383][ T8980] ? __pfx_inetdev_event+0x10/0x10 [ 508.989425][ T8980] notifier_call_chain+0x1a5/0x3d0 [ 508.989473][ T8980] register_netdevice+0x18a4/0x1eb0 [ 508.989521][ T8980] ? __pfx_register_netdevice+0x10/0x10 [ 508.989550][ T8980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.989585][ T8980] ? netif_napi_add_weight_locked+0x53a/0x940 [ 508.989622][ T8980] ? netif_napi_add_weight_locked+0x6d7/0x940 [ 508.989660][ T8980] ? netif_napi_set_irq_locked+0x1f6/0x720 [ 508.989699][ T8980] lapbeth_new_device+0x30c/0x570 [ 508.989731][ T8980] lapbeth_device_event+0x327/0x460 [ 508.989762][ T8980] notifier_call_chain+0x1a5/0x3d0 [ 508.989809][ T8980] __dev_notify_flags+0x31e/0x510 [ 508.989832][ T8980] ? netif_set_allmulti+0x373/0x4d0 [ 508.989869][ T8980] ? __pfx___dev_notify_flags+0x10/0x10 [ 508.989891][ T8980] ? __dev_change_flags+0x64b/0x820 [ 508.989922][ T8980] ? __pfx___dev_change_flags+0x10/0x10 [ 508.989961][ T8980] rtnl_configure_link+0x2f5/0x510 [ 508.989996][ T8980] ? __pfx_macvlan_newlink+0x10/0x10 [ 508.990032][ T8980] rtnl_newlink_create+0x343/0x7b0 [ 508.990067][ T8980] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 508.990098][ T8980] ? __pfx___mutex_lock+0x10/0x10 [ 508.990145][ T8980] ? ns_capable+0x89/0xe0 [ 508.990182][ T8980] rtnl_newlink+0x166d/0x1c30 [ 508.990222][ T8980] ? __pfx_rtnl_newlink+0x10/0x10 [ 508.990246][ T8980] ? __lock_acquire+0x6df/0x2e50 [ 508.990277][ T8980] ? __lock_acquire+0x6df/0x2e50 [ 508.990317][ T8980] ? lock_acquire+0x115/0x350 [ 508.990350][ T8980] ? lock_acquire+0x115/0x350 [ 508.990384][ T8980] ? is_bpf_text_address+0x26/0x2b0 [ 508.990418][ T8980] ? __lock_acquire+0x6df/0x2e50 [ 508.990446][ T8980] ? kernel_text_address+0xa5/0xe0 [ 508.990474][ T8980] ? __kernel_text_address+0xd/0x30 [ 508.990499][ T8980] ? unwind_get_return_address+0x4d/0x90 [ 508.990527][ T8980] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 508.990551][ T8980] ? arch_stack_walk+0xfb/0x150 [ 508.990590][ T8980] ? lock_acquire+0x115/0x350 [ 508.990628][ T8980] ? __pfx_rtnl_newlink+0x10/0x10 [ 508.990649][ T8980] rtnetlink_rcv_msg+0x802/0xc00 [ 508.990671][ T8980] ? netlink_sendmsg+0x5d4/0xb40 [ 508.990702][ T8980] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 508.990724][ T8980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.990746][ T8980] ? __lock_acquire+0x6df/0x2e50 [ 508.990782][ T8980] netlink_rcv_skb+0x226/0x4a0 [ 508.990811][ T8980] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.990835][ T8980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.990890][ T8980] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.990918][ T8980] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.990954][ T8980] netlink_unicast+0x7bd/0x940 [ 508.990991][ T8980] netlink_sendmsg+0x813/0xb40 [ 508.991031][ T8980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.991070][ T8980] ? apparmor_socket_sendmsg+0x18b/0x360 [ 508.991108][ T8980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.991137][ T8980] sock_sendmsg_nosec+0x13a/0x180 [ 508.991173][ T8980] ____sys_sendmsg+0x54e/0x850 [ 508.991207][ T8980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.991245][ T8980] ? import_iovec+0x73/0xa0 [ 508.991274][ T8980] ___sys_sendmsg+0x2a5/0x360 [ 508.991299][ T8980] ? __lock_acquire+0x6df/0x2e50 [ 508.991328][ T8980] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.991361][ T8980] ? futex_wait+0x2a2/0x390 [ 508.991430][ T8980] ? __fget_files+0x2a/0x420 [ 508.991461][ T8980] ? __fget_files+0x3a2/0x420 [ 508.991504][ T8980] __x64_sys_sendmsg+0x1b1/0x290 [ 508.991532][ T8980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 508.991584][ T8980] do_syscall_64+0x166/0x520 [ 508.991619][ T8980] ? trace_irq_disable+0x3b/0x140 [ 508.991643][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.991668][ T8980] ? clear_bhb_loop+0x70/0xc0 [ 508.991697][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.991721][ T8980] RIP: 0033:0x7faf8db9e0d9 [ 508.991755][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.991776][ T8980] RSP: 002b:00007faf8eb2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.991803][ T8980] RAX: ffffffffffffffda RBX: 00007faf8de25fa0 RCX: 00007faf8db9e0d9 [ 508.991822][ T8980] RDX: 0000000020008040 RSI: 0000200000000100 RDI: 0000000000000004 [ 508.991862][ T8980] RBP: 00007faf8dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 508.991877][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.991891][ T8980] R13: 00007faf8de26038 R14: 00007faf8de25fa0 R15: 00007ffdb84ef378 [ 508.991931][ T8980] [ 509.032171][ T1225] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.208437][ T1225] usb 2-1: Using ep0 maxpacket: 32 [ 509.210318][ T1225] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 509.215746][ T8980] memory: usage 92kB, limit 96kB, failcnt 29 [ 509.215867][ T8980] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 509.215905][ T8980] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 509.215946][ T8980] Memory cgroup stats for /syz3/test: [ 509.224583][ T1225] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 509.224665][ T1225] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 509.224761][ T1225] usb 2-1: config 0 has no interface number 0 [ 509.226349][ T8980] cache 0 [ 509.226373][ T8980] rss 0 [ 509.226404][ T8980] rss_huge 0 [ 509.226487][ T8980] shmem 0 [ 509.226509][ T8980] mapped_file 0 [ 509.226530][ T8980] dirty 0 [ 509.226551][ T8980] writeback 0 [ 509.226574][ T8980] workingset_refault_anon 0 [ 509.226658][ T8980] workingset_refault_file 0 [ 509.226683][ T8980] swap 0 [ 509.226705][ T8980] swapcached 0 [ 509.226727][ T8980] pgpgin 0 [ 509.226749][ T8980] pgpgout 0 [ 509.226832][ T8980] pgfault 0 [ 509.226856][ T8980] pgmajfault 0 [ 509.226879][ T8980] inactive_anon 0 [ 509.226901][ T8980] active_anon 0 [ 509.226915][ T8980] inactive_file 0 [ 509.226936][ T8980] active_file 0 [ 509.227035][ T8980] unevictable 0 [ 509.227056][ T8980] hierarchical_memory_limit 98304 [ 509.227085][ T8980] hierarchical_memsw_limit 9223372036854771712 [ 509.227124][ T8980] total_cache 0 [ 509.227197][ T8980] total_rss 0 [ 509.227225][ T8980] total_rss_huge 0 [ 509.227246][ T8980] total_shmem 0 [ 509.227262][ T8980] total_mapped_file 0 [ 509.227284][ T8980] total_dirty 0 [ 509.227306][ T8980] total_writeback 0 [ 509.227398][ T8980] total_workingset_refault_anon 0 [ 509.227420][ T8980] total_workingset_refault_file 0 [ 509.227443][ T8980] total_swap 0 [ 509.227464][ T8980] total_swapcached 0 [ 509.227492][ T8980] total_pgpgin 0 [ 509.227559][ T8980] total_pgpgout 0 [ 509.227581][ T8980] total_pgfault 0 [ 509.227602][ T8980] total_pgmajfault 0 [ 509.232607][ T8980] total_inactive_anon 0 [ 509.238650][ T8980] total_active_anon 0 [ 509.238691][ T8980] total_inactive_file 0 [ 509.238776][ T8980] total_active_file 0 [ 509.238806][ T8980] total_unevictable 0 [ 509.238820][ T8980] anon_cost 0 [ 509.238842][ T8980] file_cost 0 [ 509.238871][ T8980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.931,pid=8979,uid=0 [ 509.242789][ T8980] Memory cgroup out of memory: Killed process 8979 (syz.3.931) total-vm:104300kB, anon-rss:1428kB, file-rss:23032kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 509.270026][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.270084][ T1225] usb 2-1: Product: syz [ 509.270100][ T1225] usb 2-1: Manufacturer: syz [ 509.270116][ T1225] usb 2-1: SerialNumber: syz [ 509.330171][ T1225] usb 2-1: config 0 descriptor?? [ 509.922998][ T1225] viperboard 2-1:0.61: version 0.00 found at bus 002 address 011 [ 509.956406][ T1225] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 509.956459][ T1225] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 510.599896][ T1225] usb 2-1: USB disconnect, device number 11 [ 510.957068][ T8980] syz.3.931 (8980) used greatest stack depth: 16456 bytes left [ 511.708879][ T5810] logitech-hidpp-device 0005:046D:B012.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 512.084784][ T9005] fido_id[9005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.427247][ T9017] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 513.634845][ T9029] loop1: detected capacity change from 0 to 64 [ 514.632828][ T9042] netlink: 128 bytes leftover after parsing attributes in process `syz.3.945'. [ 514.856489][ T9046] fuse: fd is not a fuse device [ 515.948122][ T1556] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 516.100878][ T1556] usb 4-1: Using ep0 maxpacket: 8 [ 516.104399][ T1556] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.116655][ T1556] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 516.116734][ T1556] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.116787][ T1556] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 516.116818][ T1556] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.116845][ T1556] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.116893][ T1556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.179840][ T1556] usbtmc 4-1:16.0: bulk endpoints not found [ 516.510972][ T1556] usb 4-1: USB disconnect, device number 12 [ 516.702146][ T9064] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 517.818314][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 517.887372][ T3386] IPVS: starting estimator thread 0... [ 518.033398][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 518.063676][ T9071] IPVS: using max 25 ests per chain, 60000 per kthread [ 518.156077][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 518.278243][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.278292][ T9] usb 4-1: Product: syz [ 518.278324][ T9] usb 4-1: Manufacturer: syz [ 518.278345][ T9] usb 4-1: SerialNumber: syz [ 518.312746][ T9] usb 4-1: config 0 descriptor?? [ 518.333657][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 518.342002][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 518.668940][ T10] usb 4-1: USB disconnect, device number 13 [ 518.768214][ T1556] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 518.918235][ T1556] usb 5-1: Using ep0 maxpacket: 8 [ 518.925180][ T1556] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 518.939246][ T1556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.947612][ T1556] usb 5-1: Product: syz [ 518.947633][ T1556] usb 5-1: Manufacturer: syz [ 518.947650][ T1556] usb 5-1: SerialNumber: syz [ 519.194618][ T1556] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 519.202722][ T9084] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 519.217840][ T1556] usb 5-1: unit 3 not found! [ 519.302290][ T1556] usb 5-1: USB disconnect, device number 14 [ 519.355190][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.958720][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 520.474251][ T9109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.966'. [ 520.964920][ T9110] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 521.930822][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 521.963010][ T9131] netlink: 84 bytes leftover after parsing attributes in process `syz.1.974'. [ 522.095925][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 522.095980][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 522.116420][ T10] usb 1-1: config 2 has an invalid interface number: 85 but max is 0 [ 522.116469][ T10] usb 1-1: config 2 has no interface number 0 [ 522.116518][ T10] usb 1-1: config 2 interface 85 has no altsetting 0 [ 522.142683][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.151026][ T10] usb 1-1: Product: syz [ 522.155445][ T10] usb 1-1: Manufacturer: syz [ 522.160362][ T10] usb 1-1: SerialNumber: syz [ 522.403798][ T10] gspca_main: conex-2.14.0 probing 0572:0041 [ 522.801076][ T10] usb 1-1: USB disconnect, device number 12 [ 522.844431][ T9142] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 525.365141][ T9166] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 527.273384][ T9189] process 'syz.3.987' launched './file2' with NULL argv: empty string added [ 527.438981][ T9189] comedi comedi1: Minor 4 specified more than once! [ 528.043291][ T9195] evm: overlay not supported [ 530.310606][ T9226] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 530.368205][ T5810] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 530.391927][ T9229] netlink: 72 bytes leftover after parsing attributes in process `syz.2.998'. [ 530.402048][ T9229] netlink: 332 bytes leftover after parsing attributes in process `syz.2.998'. [ 530.502685][ T9232] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 531.268903][ T5810] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 531.273951][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.281902][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.281975][ T5810] usb 2-1: Product: syz [ 531.282016][ T5810] usb 2-1: Manufacturer: syz [ 531.282046][ T5810] usb 2-1: SerialNumber: syz [ 531.361283][ T5810] sisusb 2-1:1.0: Invalid USB2VGA device [ 531.361334][ T5810] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 531.878141][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 532.051548][ T9253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1002'. [ 532.051669][ T9253] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 532.051747][ T9253] netlink: 'syz.2.1002': attribute type 2 has an invalid length. [ 532.051807][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 532.632632][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'. [ 532.769866][ T9261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.509991][ T9276] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 534.088210][ T10] usb 2-1: USB disconnect, device number 12 [ 534.267881][ T9274] loop4: detected capacity change from 0 to 4096 [ 535.980610][ T9285] fuse: Unknown parameter 'fd0x0000000000000003' [ 536.459959][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1018'. [ 536.624565][ T9291] loop4: detected capacity change from 0 to 1764 [ 536.631725][ T9294] 9p: Bad value for 'rfdno' [ 536.733152][ T9303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1016'. [ 536.733259][ T9303] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 536.733338][ T9303] netlink: 'syz.3.1016': attribute type 2 has an invalid length. [ 536.733397][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 537.341242][ T32] kauditd_printk_skb: 4 callbacks suppressed [ 537.347658][ T32] audit: type=1800 audit(1787729603.941:147): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1019" name="file0" dev="loop4" ino=1923 res=0 errno=0 [ 537.791576][ T9308] loop3: detected capacity change from 0 to 32768 [ 537.801529][ T9308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1023 (9308) [ 537.964869][ T9308] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 537.964923][ T9308] BTRFS info (device loop3): using crc32c checksum algorithm [ 538.076555][ T9322] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 538.771545][ T9330] fuse: Unknown parameter 'fd0x0000000000000003' [ 538.814105][ T9308] BTRFS info (device loop3): enabling ssd optimizations [ 538.814164][ T9308] BTRFS info (device loop3): turning on flush-on-commit [ 538.814203][ T9308] BTRFS info (device loop3): enabling free space tree [ 538.814272][ T9308] BTRFS info (device loop3): enabling auto defrag [ 538.814352][ T9308] BTRFS info (device loop3): use lzo compression, level 1 [ 538.814417][ T9308] BTRFS info (device loop3): max_inline set to 0 [ 538.875159][ T32] audit: type=1800 audit(1787729605.521:148): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1023" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 539.117216][ T9336] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 539.197612][ T5619] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.307858][ T9344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 539.366554][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 539.985549][ T9357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1034'. [ 539.985659][ T9357] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 539.985732][ T9357] netlink: 'syz.3.1034': attribute type 2 has an invalid length. [ 539.985791][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 540.846318][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 541.299290][ T1225] logitech-hidpp-device 0005:046D:B012.0007: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 542.989164][ T1225] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 543.170884][ T1225] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 543.173846][ T1225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.198391][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.198444][ T1225] usb 5-1: Product: syz [ 543.198462][ T1225] usb 5-1: Manufacturer: syz [ 543.198503][ T1225] usb 5-1: SerialNumber: syz [ 543.230630][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 543.253764][ T9411] macvlan2: entered allmulticast mode [ 543.360294][ T9408] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 543.465110][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.474720][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.220231][ T1225] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -2 [ 545.115590][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 545.161902][ T9469] macvlan3: entered allmulticast mode [ 545.739993][ T1556] usb 5-1: USB disconnect, device number 15 [ 545.802687][ T9484] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 545.819665][ T1225] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 545.979489][ T1225] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 545.987340][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.987429][ T1225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.999766][ T1225] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 546.002399][ T1225] usb 1-1: Manufacturer: syz [ 546.054593][ T1225] usb 1-1: config 0 descriptor?? [ 546.828368][ T1225] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 546.828535][ T1225] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 546.828887][ T1225] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 546.874234][ T1225] usb 1-1: USB disconnect, device number 13 [ 546.878730][ T5743] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 547.720195][ T9500] fuse: fd is not a fuse device [ 547.791837][ T5743] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 547.795613][ T5743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.806747][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.806820][ T5743] usb 5-1: Product: syz [ 547.806863][ T5743] usb 5-1: Manufacturer: syz [ 547.806905][ T5743] usb 5-1: SerialNumber: syz [ 547.843047][ T5743] usb 5-1: config 0 descriptor?? [ 547.891350][ T5743] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 547.893176][ T5743] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 548.089406][ T9493] loop4: detected capacity change from 0 to 24 [ 548.220135][ T1556] usb 5-1: USB disconnect, device number 16 [ 548.263503][ T9513] loop1: detected capacity change from 0 to 128 [ 548.276173][ T9513] EXT4-fs (loop1): Test dummy encryption mode enabled [ 548.312248][ T9513] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.325741][ T9513] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.396752][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 549.509759][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.519278][ T9521] macvlan4: entered allmulticast mode [ 549.791772][ T9531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1080'. [ 550.542119][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1084'. [ 553.160947][ T9570] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 553.176755][ T9570] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 553.195891][ T9570] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 553.329190][ T9570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 553.519859][ T9570] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 555.409237][ T9597] [U] û [ 555.416901][ T9594] [U] á [ 555.706297][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1098'. [ 556.375815][ T9602] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 557.083717][ T9617] fuse: fd is not a fuse device [ 559.777808][ T9638] binder: 9637:9638 unknown command 0 [ 559.777838][ T9638] binder: 9637:9638 ioctl c0306201 200000004a40 returned -22 [ 560.518143][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1110'. [ 561.333040][ T9661] fuse: Bad value for 'fd' [ 561.822810][ T9664] fuse: fd is not a fuse device [ 562.546550][ T9684] fuse: Bad value for 'fd' [ 562.581053][ T9686] coredump: 625(syz.3.1117): Core dump to core aborted: cannot preserve file permissions [ 563.091089][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.551105][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 568.465187][ T9719] syz.2.1122 (9719) used greatest stack depth: 16104 bytes left [ 568.539564][ T9721] fuse: fd is not a fuse device [ 568.677501][ T9730] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1127'. [ 570.160523][ T9743] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.1131'. [ 570.909470][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1135'. [ 570.909627][ T9758] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 570.909701][ T9758] netlink: 'syz.3.1135': attribute type 2 has an invalid length. [ 570.909761][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 571.995840][ T9765] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 572.337367][ T9777] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 572.736895][ T9777] bond1: entered promiscuous mode [ 572.796475][ T9777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.121850][ T9782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.145767][ T9782] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 573.145828][ T9782] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 573.349567][ T9782] bond1: (slave ip6gre1): making interface the new active one [ 573.400386][ T9782] ip6gre1: entered promiscuous mode [ 573.547700][ T9782] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 574.806988][ T9805] loop1: detected capacity change from 0 to 1024 [ 574.833801][ T9805] EXT4-fs: Ignoring removed mblk_io_submit option [ 574.844569][ T9805] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 574.844637][ T9805] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 575.449874][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1148'. [ 575.449988][ T9813] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 575.450063][ T9813] netlink: 'syz.4.1148': attribute type 2 has an invalid length. [ 575.450123][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 576.325637][ T9820] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 576.390325][ T9822] fuse: fd is not a fuse device [ 576.612405][ T9820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.630027][ T9823] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 576.640441][ T9823] bond2: (slave wlan1): Opening slave failed [ 579.576336][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 580.031820][ T9861] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1160'. [ 580.031948][ T9861] netlink: 'syz.1.1160': attribute type 1 has an invalid length. [ 580.032027][ T9861] netlink: 'syz.1.1160': attribute type 2 has an invalid length. [ 580.032087][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 581.723944][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 582.663629][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.666863][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.965999][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.966176][ T9896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.966592][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.966718][ T9896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.036945][ T9896] bridge0: entered promiscuous mode [ 583.037013][ T9896] bridge0: entered allmulticast mode [ 583.758607][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 584.241971][ T9916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 584.242085][ T9916] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 584.242160][ T9916] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 584.242228][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 586.136736][ T9921] binder: 9919:9921 unknown command 0 [ 586.136788][ T9921] binder: 9919:9921 ioctl c0306201 200000004a40 returned -22 [ 586.154030][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'. [ 587.142005][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 588.524650][ T9953] cifs: Unknown parameter 'f,' [ 589.341962][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1188'. [ 589.342080][ T9966] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 589.342154][ T9966] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 589.342221][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 590.072454][ T9969] fuse: fd is not a fuse device [ 590.908469][ T9972] fuse: fd is not a fuse device [ 594.726321][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 594.857705][T10048] netlink: 'syz.0.1212': attribute type 5 has an invalid length. [ 594.857762][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'. [ 595.745791][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 596.267839][T10075] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 599.386078][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1219'. [ 600.989385][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.990218][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.122464][T10126] loop1: detected capacity change from 0 to 128 [ 601.156609][T10126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 601.169542][T10126] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.451787][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.551839][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.597206][T10114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.412295][T10138] binder: 10136:10138 unknown command 0 [ 602.418084][T10138] binder: 10136:10138 ioctl c0306201 200000004a40 returned -22 [ 603.327683][ T9341] syz.2.1029 (9341) used greatest stack depth: 16064 bytes left [ 603.753272][T10123] tipc: Started in network mode [ 603.753307][T10123] tipc: Node identity 4, cluster identity 4711 [ 603.753358][T10123] tipc: Node number set to 4 [ 603.758343][ T5876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.758400][ T5876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.758457][ T5876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.758500][ T5876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.466120][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 605.690242][T10164] loop1: detected capacity change from 0 to 128 [ 605.733835][T10164] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 605.747834][T10164] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.215112][T10179] tipc: Cannot configure node identity twice [ 606.874175][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.534742][T10208] fuse: fd is not a fuse device [ 610.818304][ T5720] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 610.973681][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 610.978514][ T5720] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 611.008354][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.008411][ T5720] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.046386][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.046442][ T5720] usb 2-1: Product: syz [ 611.046460][ T5720] usb 2-1: Manufacturer: syz [ 611.046475][ T5720] usb 2-1: SerialNumber: syz [ 611.087452][ T5720] usb 2-1: config 0 descriptor?? [ 612.998480][T10244] fuse: Bad value for 'fd' [ 615.575879][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 615.924209][T10281] MTRR 1 not used [ 617.785721][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.804689][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.935987][T10292] fuse: Bad value for 'fd' [ 618.820710][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.829345][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.635591][T10322] loop1: detected capacity change from 0 to 512 [ 620.506193][ T10] usb 2-1: USB disconnect, device number 13 [ 621.626131][T10329] tipc: Invalid UDP bearer configuration [ 621.626212][T10329] tipc: Enabling of bearer rejected, failed to enable media [ 621.709306][T10332] netlink: 'syz.2.1304': attribute type 21 has an invalid length. [ 621.709363][T10332] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1304'. [ 621.746328][T10332] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1304'. [ 622.143890][T10352] fuse: fd is not a fuse device [ 622.630117][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1313'. [ 624.255955][T10378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 624.501156][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.980411][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1324'. [ 625.839191][T10398] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 626.316331][T10415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1331'. [ 626.316377][T10415] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 626.316413][T10415] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 626.316431][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 626.930046][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 626.930108][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 627.131261][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.131755][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.159946][T10401] bridge0: left promiscuous mode [ 627.165296][T10401] bridge0: left allmulticast mode [ 627.572940][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.608695][T10401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.788352][T10427] binder: 10425:10427 ioctl 4018620d 0 returned -22 [ 627.795050][T10427] binder: 10425:10427 unknown command 0 [ 627.795092][T10427] binder: 10425:10427 ioctl c0306201 200000004a40 returned -22 [ 628.410353][T10401] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 628.451683][T10401] bond1: left promiscuous mode [ 628.451737][T10401] ip6gre1: left promiscuous mode [ 628.558302][ T3373] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.558374][ T3373] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.558473][ T3373] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.558586][ T3373] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.089602][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'. [ 631.146404][T10457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1343'. [ 631.146442][T10457] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 631.146465][T10457] netlink: 'syz.1.1343': attribute type 2 has an invalid length. [ 631.146478][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 632.204092][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 632.359291][T10472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1347'. [ 635.992787][T10501] binder: 10500:10501 ioctl c0306201 0 returned -14 [ 638.034881][T10525] fuse: fd is not a fuse device [ 638.441674][T10533] fuse: fd is not a fuse device [ 638.821392][T10540] fuse: fd is not a fuse device [ 640.208824][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 641.878370][T10560] syz_tun: entered allmulticast mode [ 641.943087][T10560] dvmrp6: entered allmulticast mode [ 642.180424][T10559] syz_tun: left allmulticast mode [ 642.620757][ T32] audit: type=1804 audit(1787729709.261:149): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1379" name="bus" dev="ramfs" ino=21205 res=1 errno=0 [ 642.653772][ T5743] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 642.666846][ T32] audit: type=1804 audit(1787729709.311:150): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1379" name="bus" dev="ramfs" ino=21205 res=1 errno=0 [ 642.809057][ T5743] usb 2-1: Using ep0 maxpacket: 32 [ 642.810998][ T5743] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 642.843303][ T5743] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.864636][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.864697][ T5743] usb 2-1: Product: syz [ 642.864715][ T5743] usb 2-1: Manufacturer: syz [ 642.864731][ T5743] usb 2-1: SerialNumber: syz [ 642.897229][ T5743] usb 2-1: config 0 descriptor?? [ 643.458492][T10575] fuse: fd is not a fuse device [ 645.893939][T10613] loop1: detected capacity change from 0 to 1024 [ 645.906229][T10613] EXT4-fs: Ignoring removed mblk_io_submit option [ 645.916345][T10613] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 645.916403][T10613] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 646.012020][T10615] fuse: fd is not a fuse device [ 646.581462][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 648.300753][T10652] fuse: fd is not a fuse device [ 648.435453][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 650.201203][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.204193][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.239193][T10689] tipc: Failed to remove unknown binding: 66,0,0/4:4097821344/4097821345 [ 650.239932][T10689] tipc: Failed to remove unknown binding: 66,0,0/4:4097821344/4097821345 [ 652.795050][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 653.504395][ T5743] usb 2-1: USB disconnect, device number 14 [ 653.938273][ T5743] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 654.108619][ T5743] usb 2-1: Using ep0 maxpacket: 8 [ 654.118794][ T5743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 654.118867][ T5743] usb 2-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 654.141229][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.141283][ T5743] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 654.141356][ T5743] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 194, changing to 7 [ 654.174474][T10721] tipc: Failed to remove unknown binding: 66,0,0/4:1041652179/1041652180 [ 654.177690][T10721] tipc: Failed to remove unknown binding: 66,0,0/4:1041652179/1041652180 [ 654.203600][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.203646][ T5743] usb 2-1: Product: syz [ 654.203682][ T5743] usb 2-1: Manufacturer: syz [ 654.221597][ T5743] usb 2-1: SerialNumber: syz [ 654.497054][ T5743] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 655.722766][ T5743] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 655.748221][ T5743] usb 2-1: USB disconnect, device number 15 [ 655.916565][T10712] udevd[10712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.035562][T10729] dvmrp6: entered allmulticast mode [ 656.088966][T10731] fuse: fd is not a fuse device [ 659.585701][T10756] tipc: Failed to remove unknown binding: 66,0,0/0:1582187455/1582187456 [ 659.594980][T10756] tipc: Failed to remove unknown binding: 66,0,0/0:1582187455/1582187456 [ 659.988702][T10763] fuse: fd is not a fuse device [ 660.328921][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 660.482040][T10779] fuse: fd is not a fuse device [ 661.992196][ T5743] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 662.055300][T10805] fuse: fd is not a fuse device [ 662.340457][ T5743] usb 2-1: Using ep0 maxpacket: 32 [ 662.348566][ T5743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.348634][ T5743] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.367484][ T5743] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 662.376514][ T5743] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 662.385009][ T5743] usb 2-1: config 14 has no interface number 0 [ 662.385059][ T5743] usb 2-1: config 14 has no interface number 1 [ 662.385128][ T5743] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 662.385160][ T5743] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 662.385193][ T5743] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 662.385226][ T5743] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 662.385259][ T5743] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 662.385291][ T5743] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.385321][ T5743] usb 2-1: config 14 interface 57 has no altsetting 0 [ 662.385345][ T5743] usb 2-1: config 14 interface 228 has no altsetting 0 [ 662.449051][T10813] tipc: Failed to remove unknown binding: 66,0,0/0:2971746677/2971746678 [ 662.460851][T10813] tipc: Failed to remove unknown binding: 66,0,0/0:2971746677/2971746678 [ 662.488949][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.488979][ T5743] usb 2-1: Product: syz [ 662.488995][ T5743] usb 2-1: Manufacturer: syz [ 662.489012][ T5743] usb 2-1: SerialNumber: syz [ 662.573181][T10817] fuse: fd is not a fuse device [ 664.067042][ T5743] legousbtower 2-1:14.57: interrupt endpoints not found [ 664.725970][ T5743] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 665.456775][ T5743] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 666.286497][ T5743] usb 2-1: USB disconnect, device number 16 [ 666.401744][ T5743] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 666.655097][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 667.074014][T10860] loop1: detected capacity change from 0 to 16 [ 667.108645][T10860] erofs (device loop1): mounted with root inode @ nid 36. [ 668.335524][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 668.374139][T10864] macvlan2: entered allmulticast mode [ 668.374182][T10864] gretap0: entered allmulticast mode [ 668.810880][T10870] tipc: Failed to remove unknown binding: 66,0,0/0:258080907/258080908 [ 668.811348][T10870] tipc: Failed to remove unknown binding: 66,0,0/0:258080907/258080908 [ 669.865897][T10874] syzkaller0: entered promiscuous mode [ 669.865947][T10874] syzkaller0: entered allmulticast mode [ 671.270068][T10884] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1486'. [ 671.770541][T10900] netlink: 'syz.4.1484': attribute type 1 has an invalid length. [ 673.501104][T10900] bond3: entered promiscuous mode [ 673.508734][T10900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 673.831289][T10911] tipc: Failed to remove unknown binding: 66,0,0/0:999926106/999926107 [ 673.831866][T10911] tipc: Failed to remove unknown binding: 66,0,0/0:999926106/999926107 [ 674.113786][T10913] fuse: fd is not a fuse device [ 675.739365][T10933] fuse: fd is not a fuse device [ 676.976992][T10939] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 677.044320][T10939] bond1: entered promiscuous mode [ 677.051745][T10939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.131389][T10939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.140928][T10939] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 677.151436][T10939] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 677.167726][T10939] bond1: (slave ip6gre1): making interface the new active one [ 677.167772][T10939] ip6gre1: entered promiscuous mode [ 677.183492][T10939] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 679.027997][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 679.096267][T10952] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1492'. [ 679.096622][T10952] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1492'. [ 679.859216][T10959] loop1: detected capacity change from 0 to 128 [ 680.599114][T10962] loop1: detected capacity change from 0 to 8192 [ 680.818745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.381125][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'. [ 683.493696][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 685.941603][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.305013][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 687.899005][ T79] ------------[ cut here ]------------ [ 687.899044][ T79] time_after(jiffies, timeout) [ 687.899078][ T79] WARNING: io_uring/io_uring.c:2356 at io_ring_exit_work+0x4d0/0x9a0, CPU#1: kworker/u8:5/79 [ 687.921728][ T79] Modules linked in: [ 687.927485][ T79] CPU: 1 UID: 0 PID: 79 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 687.936873][ T79] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.947116][ T79] Workqueue: iou_exit io_ring_exit_work [ 687.953045][ T79] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 687.958942][ T79] Code: c6 05 5d b3 38 0f 01 48 c7 c7 80 f1 6a 8c be 25 00 00 00 48 c7 c2 60 e8 6a 8c e8 9b 77 78 00 e9 70 fe ff ff e8 11 cc 9c 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 687.978677][ T79] RSP: 0018:ffffc900020af940 EFLAGS: 00010293 [ 687.984786][ T79] RAX: ffffffff812af08f RBX: 00000001000096c4 RCX: ffff88801dbd0000 [ 687.992842][ T79] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 688.000894][ T79] RBP: ffffc900020afad0 R08: ffffc900020af8c7 R09: 1ffff92000415f18 [ 688.008924][ T79] R10: dffffc0000000000 R11: fffff52000415f19 R12: dffffc0000000000 [ 688.016964][ T79] R13: 00000001000096bf R14: 0000000000002000 R15: ffff888079d50000 [ 688.025080][ T79] FS: 0000000000000000(0000) GS:ffff888124dd5000(0000) knlGS:0000000000000000 [ 688.034092][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 688.040851][ T79] CR2: 0000200000049000 CR3: 000000007bbd2000 CR4: 00000000003526f0 [ 688.048908][ T79] Call Trace: [ 688.052224][ T79] [ 688.055205][ T79] ? __pfx_io_ring_exit_work+0x10/0x10 [ 688.060779][ T79] ? rcu_is_watching+0x16/0xb0 [ 688.065588][ T79] ? process_scheduled_works+0x97a/0x1630 [ 688.071511][ T79] process_scheduled_works+0xc3d/0x1630 [ 688.077142][ T79] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.083359][ T79] ? assign_work+0x3cf/0x5d0 [ 688.088067][ T79] worker_thread+0xa47/0xfb0 [ 688.092738][ T79] kthread+0x38b/0x480 [ 688.096841][ T79] ? __pfx_worker_thread+0x10/0x10 [ 688.102041][ T79] ? __pfx_kthread+0x10/0x10 [ 688.106670][ T79] ret_from_fork+0x514/0xb70 [ 688.111417][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 688.116596][ T79] ? __switch_to+0xc89/0x1420 [ 688.121427][ T79] ? __pfx_kthread+0x10/0x10 [ 688.126077][ T79] ret_from_fork_asm+0x1a/0x30 [ 688.130933][ T79] [ 688.134002][ T79] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 688.141307][ T79] CPU: 1 UID: 0 PID: 79 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 688.150624][ T79] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.160718][ T79] Workqueue: iou_exit io_ring_exit_work [ 688.166319][ T79] Call Trace: [ 688.169608][ T79] [ 688.172590][ T79] vpanic+0x56d/0xa60 [ 688.176600][ T79] ? __pfx__printk+0x10/0x10 [ 688.181239][ T79] ? __pfx_vpanic+0x10/0x10 [ 688.185764][ T79] ? is_bpf_text_address+0x292/0x2b0 [ 688.191063][ T79] ? is_bpf_text_address+0x26/0x2b0 [ 688.196285][ T79] panic+0xc5/0xd0 [ 688.200042][ T79] ? __pfx_panic+0x10/0x10 [ 688.204492][ T79] ? ret_from_fork_asm+0x1a/0x30 [ 688.209454][ T79] __warn+0x315/0x4c0 [ 688.213468][ T79] ? io_ring_exit_work+0x4d0/0x9a0 [ 688.218636][ T79] ? io_ring_exit_work+0x4d0/0x9a0 [ 688.223768][ T79] __report_bug+0x276/0x570 [ 688.228297][ T79] ? io_ring_exit_work+0x4d0/0x9a0 [ 688.233426][ T79] ? __pfx___report_bug+0x10/0x10 [ 688.238467][ T79] ? trace_contention_end+0x3d/0x140 [ 688.243770][ T79] ? __mutex_lock+0x30b/0x1550 [ 688.248559][ T79] ? io_ring_exit_work+0x4d0/0x9a0 [ 688.253684][ T79] report_bug+0x16b/0x220 [ 688.258043][ T79] ? io_ring_exit_work+0x4d0/0x9a0 [ 688.263182][ T79] ? io_ring_exit_work+0x4d2/0x9a0 [ 688.268304][ T79] handle_bug+0x9c/0x200 [ 688.272558][ T79] exc_invalid_op+0x1a/0x50 [ 688.277073][ T79] asm_exc_invalid_op+0x1a/0x20 [ 688.281927][ T79] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 688.287664][ T79] Code: c6 05 5d b3 38 0f 01 48 c7 c7 80 f1 6a 8c be 25 00 00 00 48 c7 c2 60 e8 6a 8c e8 9b 77 78 00 e9 70 fe ff ff e8 11 cc 9c 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 688.307280][ T79] RSP: 0018:ffffc900020af940 EFLAGS: 00010293 [ 688.313357][ T79] RAX: ffffffff812af08f RBX: 00000001000096c4 RCX: ffff88801dbd0000 [ 688.321333][ T79] RDX: 0000000000000000 RSI: fffffffffffffffb RDI: 0000000000000000 [ 688.329306][ T79] RBP: ffffc900020afad0 R08: ffffc900020af8c7 R09: 1ffff92000415f18 [ 688.337284][ T79] R10: dffffc0000000000 R11: fffff52000415f19 R12: dffffc0000000000 [ 688.345263][ T79] R13: 00000001000096bf R14: 0000000000002000 R15: ffff888079d50000 [ 688.353420][ T79] ? io_ring_exit_work+0x4cf/0x9a0 [ 688.358567][ T79] ? __pfx_io_ring_exit_work+0x10/0x10 [ 688.364143][ T79] ? rcu_is_watching+0x16/0xb0 [ 688.368949][ T79] ? process_scheduled_works+0x97a/0x1630 [ 688.374693][ T79] process_scheduled_works+0xc3d/0x1630 [ 688.380286][ T79] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.386285][ T79] ? assign_work+0x3cf/0x5d0 [ 688.390892][ T79] worker_thread+0xa47/0xfb0 [ 688.395516][ T79] kthread+0x38b/0x480 [ 688.399594][ T79] ? __pfx_worker_thread+0x10/0x10 [ 688.404720][ T79] ? __pfx_kthread+0x10/0x10 [ 688.409408][ T79] ret_from_fork+0x514/0xb70 [ 688.414020][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 688.419254][ T79] ? __switch_to+0xc89/0x1420 [ 688.423950][ T79] ? __pfx_kthread+0x10/0x10 [ 688.428550][ T79] ret_from_fork_asm+0x1a/0x30 [ 688.433338][ T79] [ 688.436996][ T79] Kernel Offset: disabled [ 688.441364][ T79] Rebooting in 86400 seconds..