last executing test programs: 16m27.669430212s ago: executing program 2 (id=159): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@nouid32}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#sxz2.'], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000000)={[{@dyn}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@nouid32}, {@test_dummy_encryption}, {@jqfmt_vfsold}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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") (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240)) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB='#sxz2.'], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000000)={[{@dyn}]}) (async) 16m23.639472633s ago: executing program 2 (id=170): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="230003000100ef", 0x7) 16m19.508565481s ago: executing program 2 (id=177): socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x4f) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRESOCT, @ANYRESDEC=0x0], 0x22) syz_usb_connect(0x3, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x4044) 16m18.715144236s ago: executing program 2 (id=178): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = getpid() r1 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) ioctl$FICLONE(r1, 0x40049409, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0x1000000d}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$pppl2tp(0x18, 0x1, 0x1) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) io_uring_setup(0x64a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xcc17f, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000680)={0x80}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) 16m17.442659003s ago: executing program 2 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10020, &(0x7f0000000000), 0x5, 0x616, &(0x7f0000001800)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001090107000000000000000005000004"], 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c89e69f01020102000000000000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) close(r4) fanotify_init(0x2, 0x800) 16m14.318927815s ago: executing program 2 (id=189): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="230003000100ef", 0x7) 15m58.14914863s ago: executing program 32 (id=189): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="230003000100ef", 0x7) 2m6.61512033s ago: executing program 4 (id=2444): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) connect$netlink(r0, &(0x7f0000000180), 0xc) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000140)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000d000000070000000900010073797a300000000084000000090a010400000000000000000700000208000a40000000004900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280140001800b00010074756e6e656c0000040002800800034000000106140000001000010000000000000000030084000a"], 0xcc}}, 0x20050800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x719, &(0x7f0000000240)={[{@nojournal_checksum}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x4f1a7201}}, {@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0xa}, 0x0}, {@nouid32}, {@noload}, {@nodelalloc}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nogrpid}, {@errors_remount}, {@journal_async_commit}, {@norecovery}, {@abort}, {@dax_never}, {@resgid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@bsdgroups}], [{@audit}, {@smackfshat}], 0x2c}, 0x6, 0x536, &(0x7f0000000480)="$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") bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e27, @multicast2}, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2m5.375083041s ago: executing program 4 (id=2450): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e500090506"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xbc, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x3, 0x8, 0x0, 0xea, 0x7f, 0x1}}, {0x6, 0x2, [0xf4]}}, {{0x1c, 0x1, {0x3e, 0xc8, 0x6, 0x5, 0x0, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0xfb, 0x5]}}, {{0x1c, 0x1, {0xd, 0x6, 0xff, 0x1, 0x2, 0x1, 0x6, 0x2}}, {0x8, 0x2, [0x57, 0x5]}}, {{0x1c, 0x1, {0x6, 0x8, 0x8001, 0x7f, 0x0, 0x100, 0xc4cd, 0x3}}, {0xa, 0x2, [0x0, 0x1817, 0xfff8]}}]}]}, 0xbc}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r6, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 2m1.848213486s ago: executing program 4 (id=2462): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xb, 0x200000, 0x5, 0x640001, 0x0, 0x8}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/anycast6\x00') 2m1.287300906s ago: executing program 4 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="4449474954414c310a494741494e0a53594e5448202753796e7468204361707475726520537769746368272030303030303030303030303030303030303030300a4c494e4520274c696e65204361707475726520537769746305000000303030303030303030303030303030303030300a108778f695363867f4933ae936e2afbd22dfc8cfd6a68f0a8ecb2afd710396b4026b803736c62f4eecd4fe43c97c5a1055ce1aa9f7d3dcbf4f4161d6ebde577b31d04cced27d2414ef5feaf231efa32318efabc25d3cbb3a14d06268754b21645620f1f532"], 0x71) dup3(r1, r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) open_tree(r2, &(0x7f0000000100)='./file0/file0\x00', 0x8100) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(0x0, 0x9) 2m0.836999812s ago: executing program 4 (id=2467): syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x2001) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) read$usbfs(0xffffffffffffffff, &(0x7f0000000440)=""/201, 0xc9) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x1c, 0x2a, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) 2m0.395467667s ago: executing program 4 (id=2469): socket$inet6(0xa, 0x3, 0x5) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r2, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x3) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x22, 0xdb, {0xdb, 0xf, "07c0cf74159515df4613722e52e8020f21089de0d85db022fe76baccad6090d496236c8d40a1c75ad1d9427de5463e297a810ebb942310528b5ad120adc87d6168277a3ac09c83c81afc43b5d92e089e06cc3c79e0312c3f9acb1b057a91e40d952286a7874a88e8b59e1f84d9b33b2c8fb2aae595bc650572c6dda42b0ab384420d90cd247f1ce88d2faaef1dbd5c771129c2bb31d505fec5f91c3bf7340e12e09f12fcb99b3d554d4531c3f6c4f34e4dd5f1e5f3f18e724829130c5f30ac5c9704b6875634ee99e4b10286bcfe4a126403f71f8bb327c044"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000c80)={0x40, 0xd, 0xef, "db131922449de7cd0784a6d54a55028a30f07d83ca055be39f5f020eff3d8a729a9e72a502710611f5c8809afc4b6dade255285a976743d5c9d05c409b06811879031d2866abc437ca0344ddbbe1c2c7a928ab6dc79160bad58cb7f96b3b7194d98e78aa3aa61db5bbbe525d3ef82921ef039a31304d62f0cd8c21c8ff94477f8814bdde9a3ac653d04ba04fd5fe2aebf0a262e1c7e95649233bedc5a773422df0909ef713b6fb290c5f29413b5bf046abffc561e69324e1dd3bd850134c880b15c2c16508df2550b10ed10efe65456bb74f3168400454c2a54a02b1524fbff4e4b628609c5f5b7ebea627a36f406d"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x5, 0xa231, 0x8, 0x9, 0x0, 0x8, 0xe, 0xd4, 0xb, 0x400, 0x1c, 0x1}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000e80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000f00)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x0, 0x23, 0x44, {0x44, 0x0, "e24b79b3b8e09ae864bb56090ea640df797e8ab6185e205ce524259fb7a3facd9100af2fb85bfc39707098c4f3816089f5fb463d85c664d18a89afe3fe15c32c8020"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8a5}}, &(0x7f0000000140)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x3, "c48b3e14"}, @global=@item_4={0x3, 0x1, 0x2, "078058b9"}, @global=@item_012={0x2, 0x1, 0xb, "35df"}, @local=@item_4={0x3, 0x2, 0xa, "37d339ac"}, @main=@item_012={0x1, 0x0, 0xc, "18"}, @global=@item_4={0x3, 0x1, 0x8, "1796e174"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe0d, 0xe8, 0x1, {0x22, 0xc73}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x14, 0x44, "38fd26a8bbc8e01fb2acdf17d63a2fadb94f538126e2cdda9485137a7497633d775d7fdc70c93ced5069856fed3e5cea35c4be68846b3a7f35ed9788c2c4ee1afbc31a67"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)={0x20, 0x1, 0xb2, "56a2a067baad42a8657c96e80f5e12fc8eac708a8a2b313611d01f59dae634aa8ecbc78e1737313ca3062481c3c6275191563510c4fb6beba32e1ba3fcf16eec688ccf79f9e4220f415efeb1fbb5dc6169cc025644df378952fb4d11498f9eb8b81603a6fa0c1ea8984b91083e9639259b976c112289f65df8f8e391290ed98fa5eb4bef22429e813d298b1e6f0d9a1efda42ed6d7e9f627fe13fe3f2b4941c36283bdecb4e5bc0a42910b4a0ca0349e4de9"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x8}}) 2m0.046367021s ago: executing program 33 (id=2469): socket$inet6(0xa, 0x3, 0x5) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r2, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x3) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x22, 0xdb, {0xdb, 0xf, "07c0cf74159515df4613722e52e8020f21089de0d85db022fe76baccad6090d496236c8d40a1c75ad1d9427de5463e297a810ebb942310528b5ad120adc87d6168277a3ac09c83c81afc43b5d92e089e06cc3c79e0312c3f9acb1b057a91e40d952286a7874a88e8b59e1f84d9b33b2c8fb2aae595bc650572c6dda42b0ab384420d90cd247f1ce88d2faaef1dbd5c771129c2bb31d505fec5f91c3bf7340e12e09f12fcb99b3d554d4531c3f6c4f34e4dd5f1e5f3f18e724829130c5f30ac5c9704b6875634ee99e4b10286bcfe4a126403f71f8bb327c044"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000c80)={0x40, 0xd, 0xef, "db131922449de7cd0784a6d54a55028a30f07d83ca055be39f5f020eff3d8a729a9e72a502710611f5c8809afc4b6dade255285a976743d5c9d05c409b06811879031d2866abc437ca0344ddbbe1c2c7a928ab6dc79160bad58cb7f96b3b7194d98e78aa3aa61db5bbbe525d3ef82921ef039a31304d62f0cd8c21c8ff94477f8814bdde9a3ac653d04ba04fd5fe2aebf0a262e1c7e95649233bedc5a773422df0909ef713b6fb290c5f29413b5bf046abffc561e69324e1dd3bd850134c880b15c2c16508df2550b10ed10efe65456bb74f3168400454c2a54a02b1524fbff4e4b628609c5f5b7ebea627a36f406d"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x5, 0xa231, 0x8, 0x9, 0x0, 0x8, 0xe, 0xd4, 0xb, 0x400, 0x1c, 0x1}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000e80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000f00)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x0, 0x23, 0x44, {0x44, 0x0, "e24b79b3b8e09ae864bb56090ea640df797e8ab6185e205ce524259fb7a3facd9100af2fb85bfc39707098c4f3816089f5fb463d85c664d18a89afe3fe15c32c8020"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8a5}}, &(0x7f0000000140)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x3, "c48b3e14"}, @global=@item_4={0x3, 0x1, 0x2, "078058b9"}, @global=@item_012={0x2, 0x1, 0xb, "35df"}, @local=@item_4={0x3, 0x2, 0xa, "37d339ac"}, @main=@item_012={0x1, 0x0, 0xc, "18"}, @global=@item_4={0x3, 0x1, 0x8, "1796e174"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe0d, 0xe8, 0x1, {0x22, 0xc73}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x0, 0x14, 0x44, "38fd26a8bbc8e01fb2acdf17d63a2fadb94f538126e2cdda9485137a7497633d775d7fdc70c93ced5069856fed3e5cea35c4be68846b3a7f35ed9788c2c4ee1afbc31a67"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)={0x20, 0x1, 0xb2, "56a2a067baad42a8657c96e80f5e12fc8eac708a8a2b313611d01f59dae634aa8ecbc78e1737313ca3062481c3c6275191563510c4fb6beba32e1ba3fcf16eec688ccf79f9e4220f415efeb1fbb5dc6169cc025644df378952fb4d11498f9eb8b81603a6fa0c1ea8984b91083e9639259b976c112289f65df8f8e391290ed98fa5eb4bef22429e813d298b1e6f0d9a1efda42ed6d7e9f627fe13fe3f2b4941c36283bdecb4e5bc0a42910b4a0ca0349e4de9"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x8}}) 6.800380625s ago: executing program 1 (id=2820): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 6.296077976s ago: executing program 1 (id=2822): socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.936485404s ago: executing program 1 (id=2826): socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.779995591s ago: executing program 3 (id=2827): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 5.723849335s ago: executing program 0 (id=2828): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) 5.452935783s ago: executing program 1 (id=2831): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x1a4}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 5.358673688s ago: executing program 6 (id=2833): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x7, 0xffffff8c}, 0x6, 0x1}}) 5.135200112s ago: executing program 6 (id=2834): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x2, {0x2, 0x5}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x310, 0x3, 0x8, 0x4, 0x10, 0x5}, 0x98, &(0x7f0000001a80)={0x5, 0xf, 0x98, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7ff, 0xf00, 0x3aed, [0xf0, 0x0]}, @generic={0x7f, 0x10, 0xb, "f77801a7ab35545f49dcee37f7a07013b2cc5a7a4768ec440f011fba4b7ad69364e1958bc035abe8b5eade99427304f1ab961cf8f1258d2afd3064c28f059f710bfdeaae522c05473cca74994bcbd68564ad4f2d3c6019f77d660640b0e58b215124aa307b533ef7e0a3e5c4324c176601a85d24518375a232c461ed"}]}, 0x1, [{0xe, &(0x7f0000001b40)=@string={0xe, 0x3, "8a2428d52a452ead5f95b5bf"}}]}) syz_usb_control_io$uac3(r3, &(0x7f0000001c80)={0x14, &(0x7f0000001bc0)={0x20, 0x8, 0x5a, {0x5a, 0x30, "018926135f47a37dba017866850bd8c97af7318c039fe96e2ece5f5ca05e92bcd078047bc832876e75ce901eed16463a7256fb922bf24761e182bdef160d0f88e2ad122159084c3a4173f1ffdc4c66dda192ac9be94c3bc5"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000001ec0)={0x44, &(0x7f0000001cc0)={0x40, 0x14, 0x27, "bd19b1750c824cbe37e8e75952150088f48ad77dfa201aa328100ec83b7eef2bbd558120b00f40"}, &(0x7f0000001d00)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0x13}, &(0x7f0000001d80)={0x20, 0x81, 0x2, "7196"}, &(0x7f0000001dc0)={0x20, 0x82, 0x3, "1c951f"}, &(0x7f0000001e00)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000001e40)={0x20, 0x84, 0x4, "d2d9f387"}, &(0x7f0000001e80)={0x20, 0x85, 0x3, "9c6f8d"}}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) read(r4, 0x0, 0x70) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.107114443s ago: executing program 3 (id=2836): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 4.729892002s ago: executing program 3 (id=2837): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x44}}, 0x0) 4.452254338s ago: executing program 3 (id=2839): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4533, 0x10100, 0xfffffffd, 0x24c, 0x0, r1}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)=0x0) io_uring_enter(r2, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r4, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16=r3, @ANYRESOCT, @ANYRESOCT=r4], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) 3.441145357s ago: executing program 7 (id=2847): r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @output={0x1000, 0x1, {0x7, 0xffffff8c}, 0x6, 0x1}}) 3.104720953s ago: executing program 7 (id=2849): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 2.838298673s ago: executing program 7 (id=2850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.502846726s ago: executing program 1 (id=2851): unshare(0x4000400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 2.50185925s ago: executing program 5 (id=2852): socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.038506123s ago: executing program 1 (id=2853): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.03715067s ago: executing program 5 (id=2854): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x1005, &(0x7f0000002840)=""/4101, 0x40f00, 0x32}, 0x94) 2.006143707s ago: executing program 0 (id=2855): unshare(0x28000600) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={0x0, 0xfeb0, 0x8}) 1.751457656s ago: executing program 5 (id=2856): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.571978669s ago: executing program 5 (id=2857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x9, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.536758962s ago: executing program 0 (id=2858): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000240)) 1.133313815s ago: executing program 6 (id=2859): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) 1.122399403s ago: executing program 3 (id=2860): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) r0 = syz_open_procfs(0x0, 0x0) openat(r0, &(0x7f0000000440)='./cgroup\x00', 0x440, 0x80) 1.067481801s ago: executing program 0 (id=2861): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) 880.315177ms ago: executing program 6 (id=2862): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) 741.921742ms ago: executing program 3 (id=2863): r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0xb649b133f097add1}], 0x1, 0x0, 0x0, 0x0) 699.954805ms ago: executing program 5 (id=2864): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 698.810341ms ago: executing program 0 (id=2865): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @loopback, 0x8}, {0xa, 0x4e1e, 0x800000d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, r1, 0xe}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 565.418272ms ago: executing program 6 (id=2866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setlease(r0, 0x400, 0x2) 527.540709ms ago: executing program 7 (id=2867): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x88000c, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x59ff7fa1420fd264}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, &(0x7f0000000240)="14e89c46daf5b03c73669f10ded9469ea36977410681bf0c47d1558010da3afc8e8c75753bb84e4981fea2528d3af6a8") openat(r1, &(0x7f0000000280)='./file0\x00', 0x80600, 0x60) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 430.599976ms ago: executing program 5 (id=2868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 415.490765ms ago: executing program 0 (id=2869): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x7813, 0x3, 0xfffffffc, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 330.666728ms ago: executing program 6 (id=2870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x8, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x3, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x5, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x1, 0x20044180) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 330.043062ms ago: executing program 7 (id=2871): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a000000040000000400000001000000a5010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002000000018"], 0x48) 0s ago: executing program 7 (id=2872): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x2, {0x2, 0x5}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x310, 0x3, 0x8, 0x4, 0x10, 0x5}, 0x98, &(0x7f0000001a80)={0x5, 0xf, 0x98, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7ff, 0xf00, 0x3aed, [0xf0, 0x0]}, @generic={0x7f, 0x10, 0xb, "f77801a7ab35545f49dcee37f7a07013b2cc5a7a4768ec440f011fba4b7ad69364e1958bc035abe8b5eade99427304f1ab961cf8f1258d2afd3064c28f059f710bfdeaae522c05473cca74994bcbd68564ad4f2d3c6019f77d660640b0e58b215124aa307b533ef7e0a3e5c4324c176601a85d24518375a232c461ed"}]}, 0x1, [{0xe, &(0x7f0000001b40)=@string={0xe, 0x3, "8a2428d52a452ead5f95b5bf"}}]}) syz_usb_control_io$uac3(r3, &(0x7f0000001c80)={0x14, &(0x7f0000001bc0)={0x20, 0x8, 0x5a, {0x5a, 0x30, "018926135f47a37dba017866850bd8c97af7318c039fe96e2ece5f5ca05e92bcd078047bc832876e75ce901eed16463a7256fb922bf24761e182bdef160d0f88e2ad122159084c3a4173f1ffdc4c66dda192ac9be94c3bc5"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000001ec0)={0x44, &(0x7f0000001cc0)={0x40, 0x14, 0x27, "bd19b1750c824cbe37e8e75952150088f48ad77dfa201aa328100ec83b7eef2bbd558120b00f40"}, &(0x7f0000001d00)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0x13}, &(0x7f0000001d80)={0x20, 0x81, 0x2, "7196"}, &(0x7f0000001dc0)={0x20, 0x82, 0x3, "1c951f"}, &(0x7f0000001e00)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000001e40)={0x20, 0x84, 0x4, "d2d9f387"}, &(0x7f0000001e80)={0x20, 0x85, 0x3, "9c6f8d"}}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) read(r4, 0x0, 0x70) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1006.389871][ T5035] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 1006.415668][ T5035] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 1006.477095][ T5035] holtek_kbd 0003:04D9:A055.000C: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 1006.553965][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.561331][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.888583][T15710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.147556][T15730] loop6: detected capacity change from 0 to 32768 [ 1007.162810][T15730] btrfs: Deprecated parameter 'usebackuproot' [ 1007.191098][T15730] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1007.219269][T15730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2398 (15730) [ 1007.323892][T15730] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1007.357609][T15730] BTRFS info (device loop6): using crc32c checksum algorithm [ 1007.447808][ T36] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1007.507264][T15730] BTRFS error (device loop6): failed to load root extent [ 1007.518097][T15730] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1007.537661][ T36] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1007.573739][T15730] BTRFS warning (device loop6): couldn't read tree root [ 1007.601238][T15730] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1007.610640][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1007.631545][ T1107] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1007.654790][T15730] BTRFS warning (device loop6): couldn't read tree root [ 1007.683377][T15730] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1007.760519][T15730] BTRFS info (device loop6): rebuilding free space tree [ 1007.839964][T15730] BTRFS info (device loop6): checking UUID tree [ 1007.863659][T15730] BTRFS info (device loop6): enabling ssd optimizations [ 1007.877603][T15730] BTRFS info (device loop6): using spread ssd allocation scheme [ 1007.902069][T15730] BTRFS info (device loop6): turning on async discard [ 1007.909972][T15730] BTRFS info (device loop6): enabling free space tree [ 1007.930168][T15730] BTRFS info (device loop6): force clearing of disk cache [ 1007.952167][T15730] BTRFS info (device loop6): enabling auto defrag [ 1007.961577][T15730] BTRFS info (device loop6): trying to use backup root at mount time [ 1007.984514][T15730] BTRFS info (device loop6): force zlib compression, level 3 [ 1008.018559][ T140] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.062028][ T140] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.124093][T15741] usb 2-1: USB disconnect, device number 70 [ 1008.225779][ T140] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.278771][ T140] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.332917][ T140] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.389015][ T140] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.461356][ T140] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.502389][ T140] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.702693][T15797] loop5: detected capacity change from 0 to 256 [ 1009.413073][T15800] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1009.459283][T15800] FAT-fs (loop5): Filesystem has been set read-only [ 1009.829296][ T7474] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1010.535029][T15812] FAULT_INJECTION: forcing a failure. [ 1010.535029][T15812] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.570353][T15812] CPU: 0 UID: 0 PID: 15812 Comm: syz.0.2412 Not tainted syzkaller #0 PREEMPT(full) [ 1010.570387][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1010.570404][T15812] Call Trace: [ 1010.570414][T15812] [ 1010.570425][T15812] dump_stack_lvl+0xe8/0x150 [ 1010.570459][T15812] should_fail_ex+0x412/0x560 [ 1010.570501][T15812] should_failslab+0xa8/0x100 [ 1010.570541][T15812] ? vm_area_alloc+0x24/0x140 [ 1010.570578][T15812] kmem_cache_alloc_noprof+0x87/0x650 [ 1010.570613][T15812] ? __pfx_vma_merge_new_range+0x10/0x10 [ 1010.570639][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.570676][T15812] vm_area_alloc+0x24/0x140 [ 1010.570720][T15812] mmap_region+0x11c6/0x22a0 [ 1010.570759][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.570789][T15812] ? tomoyo_check_open_permission+0x38e/0x470 [ 1010.570830][T15812] ? __pfx_mmap_region+0x10/0x10 [ 1010.570864][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.570894][T15812] ? __lock_acquire+0x6b5/0x2cf0 [ 1010.571019][T15812] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 1010.571076][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571107][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571137][T15812] ? cap_mmap_addr+0xaf/0x100 [ 1010.571167][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571205][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571237][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571267][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571297][T15812] ? shmem_mapping+0xd/0x50 [ 1010.571320][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571350][T15812] ? memfd_check_seals_mmap+0x165/0x200 [ 1010.571387][T15812] do_mmap+0xc39/0x10c0 [ 1010.571416][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571456][T15812] ? __pfx_mtree_load+0x10/0x10 [ 1010.571496][T15812] ? __pfx_do_mmap+0x10/0x10 [ 1010.571532][T15812] ? apparmor_mmap_file+0x2da/0x3e0 [ 1010.571568][T15812] __se_sys_remap_file_pages+0x6dd/0x8a0 [ 1010.571621][T15812] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 1010.571656][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571685][T15812] ? ksys_write+0x242/0x270 [ 1010.571725][T15812] ? __pfx_ksys_write+0x10/0x10 [ 1010.571769][T15812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1010.571799][T15812] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 1010.571834][T15812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.571862][T15812] do_syscall_64+0x15f/0xf80 [ 1010.571902][T15812] ? trace_irq_disable+0x3b/0x140 [ 1010.571948][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.571975][T15812] RIP: 0033:0x7f742f99ce59 [ 1010.571998][T15812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.572019][T15812] RSP: 002b:00007f74308d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1010.572045][T15812] RAX: ffffffffffffffda RBX: 00007f742fc15fa0 RCX: 00007f742f99ce59 [ 1010.572065][T15812] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 1010.572082][T15812] RBP: 00007f74308d6090 R08: 00000000f0ffffff R09: 0000000000000000 [ 1010.572099][T15812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.572114][T15812] R13: 00007f742fc16038 R14: 00007f742fc15fa0 R15: 00007ffe31d771a8 [ 1010.572154][T15812] [ 1011.653924][T15826] loop5: detected capacity change from 0 to 128 [ 1012.316736][T15828] program syz.6.2408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1012.372644][T15828] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1012.669461][T15831] loop6: detected capacity change from 0 to 1024 [ 1012.705796][T15831] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1012.776450][T15839] fuse: Unknown parameter '' [ 1012.817628][T15831] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 5: comm syz.6.2408: lblock 5 mapped to illegal pblock 5 (length 1) [ 1012.867234][T15831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1012.867673][T15831] Quota error (device loop6): write_blk: dquota write failed [ 1012.876901][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1012.876926][ C0] EXT4-fs (loop6): initial error at time 1779472984: ext4_map_blocks:833: inode 3: block 5 [ 1012.876979][ C0] EXT4-fs (loop6): last error at time 1779472984: ext4_map_blocks:833: inode 3: block 5 [ 1014.662014][T15831] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1014.678917][T15747] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1014.701148][T15831] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1014.737794][T15831] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2408: Failed to acquire dquot type 0 [ 1014.805649][T15831] loop6: lost filesystem error report for type 5 error -117 [ 1014.806057][T15831] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2408: lblock 5 mapped to illegal pblock 5 (length 1) [ 1014.862081][T15747] usb 5-1: Using ep0 maxpacket: 8 [ 1014.873925][T15747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1014.875387][T15831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.894703][T15747] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1014.938849][T15831] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1014.977719][T15831] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1015.017510][T15831] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2408: Failed to acquire dquot type 0 [ 1015.056625][T15747] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1015.057094][T15831] loop6: lost filesystem error report for type 5 error -117 [ 1015.082107][T15747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.094454][T15831] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2408: Freeing blocks not in datazone - block = 0, count = 4096 [ 1015.131490][T15747] usb 5-1: Product: syz [ 1015.141444][T15747] usb 5-1: Manufacturer: syz [ 1015.153506][T15747] usb 5-1: SerialNumber: syz [ 1015.163640][T15831] loop6: lost filesystem error report for type 5 error -117 [ 1015.164178][T15831] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2408: lblock 5 mapped to illegal pblock 5 (length 1) [ 1015.187668][T15747] usb 5-1: config 0 descriptor?? [ 1015.221896][T15831] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1015.222908][T15831] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1015.249551][T15831] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1015.260674][T15831] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2408: Failed to acquire dquot type 0 [ 1015.273306][T15831] loop6: lost filesystem error report for type 5 error -117 [ 1015.273767][T15831] EXT4-fs (loop6): 1 orphan inode deleted [ 1015.290328][T15831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.345286][ T7474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.456056][T15747] usb 5-1: USB disconnect, device number 48 [ 1015.724154][T15862] loop4: detected capacity change from 0 to 16 [ 1015.790234][T15862] erofs (device loop4): mounted with root inode @ nid 36. [ 1016.728985][ T4941] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1016.747151][ T30] audit: type=1800 audit(1779472988.500:352): pid=15862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2424" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1017.172674][T15873] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1017.194507][T15873] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1017.241819][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1017.287213][T15878] netlink: 'syz.3.2421': attribute type 1 has an invalid length. [ 1017.301302][T15878] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1017.324352][T15747] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1017.388286][ T30] audit: type=1800 audit(1779472989.390:353): pid=15880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2429" name="file1" dev="tmpfs" ino=2276 res=0 errno=0 [ 1017.413470][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.426217][ T24] usb 6-1: config 0 has no interface number 0 [ 1017.440353][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1017.450588][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.462647][ T24] usb 6-1: Product: syz [ 1017.485327][T15747] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.495234][ T24] usb 6-1: Manufacturer: syz [ 1017.504521][T15747] usb 5-1: config 0 has no interface number 0 [ 1017.515246][ T24] usb 6-1: SerialNumber: syz [ 1017.528326][T15747] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1017.541427][T15747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.550701][ T24] usb 6-1: config 0 descriptor?? [ 1017.556386][T15747] usb 5-1: Product: syz [ 1017.575720][T15747] usb 5-1: Manufacturer: syz [ 1017.587729][T15747] usb 5-1: SerialNumber: syz [ 1017.612552][T15747] usb 5-1: config 0 descriptor?? [ 1018.394772][T15755] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1018.399115][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2425'. [ 1018.414721][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2426'. [ 1018.592319][T15755] usb 2-1: Invalid ep0 maxpacket: 64 [ 1018.625068][ T24] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1018.712943][T15747] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1018.737511][T15755] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1018.775598][T15747] usb 5-1: USB disconnect, device number 49 [ 1018.870882][ T24] usb 6-1: USB disconnect, device number 54 [ 1018.912054][T15755] usb 2-1: Invalid ep0 maxpacket: 64 [ 1018.917992][T15755] usb usb2-port1: attempt power cycle [ 1019.006953][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'. [ 1019.304703][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2438'. [ 1019.393808][ T1098] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.412505][T15755] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1019.727754][T15755] usb 2-1: Invalid ep0 maxpacket: 64 [ 1019.782472][ T1098] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.807776][ T1098] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.816937][ T1098] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1019.922154][T15755] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1019.962495][T15755] usb 2-1: Invalid ep0 maxpacket: 64 [ 1019.985163][T15755] usb usb2-port1: unable to enumerate USB device [ 1020.115931][T15928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2439'. [ 1020.746507][T15936] loop4: detected capacity change from 0 to 512 [ 1020.764065][T15936] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1020.805196][T15936] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1020.830292][T15936] EXT4-fs (loop4): mount failed [ 1021.735963][T15950] loop3: detected capacity change from 0 to 512 [ 1021.750544][T15950] EXT4-fs: Ignoring removed i_version option [ 1021.775807][T15950] EXT4-fs: Ignoring removed nobh option [ 1021.817381][T15950] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1021.857562][T15950] EXT4-fs (loop3): 1 truncate cleaned up [ 1021.889549][T15950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.996080][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.107666][T15954] kAFS: unable to lookup cell '' [ 1022.312232][T14714] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1022.376655][T15969] nbd: couldn't find a device at index -2133000188 [ 1022.516798][T14714] usb 5-1: Using ep0 maxpacket: 8 [ 1022.884147][T14714] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 1022.902357][T14714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.914421][T14714] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1022.924741][T14714] usb 5-1: config 0 has no interface number 0 [ 1022.931577][T14714] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1022.956334][T15971] nbd: couldn't find a device at index -2133000188 [ 1023.256514][T14714] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1023.541273][T14714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.573905][T14714] usb 5-1: Product: syz [ 1023.579738][T14714] usb 5-1: Manufacturer: syz [ 1023.601626][T14714] usb 5-1: SerialNumber: syz [ 1023.677289][T14714] usb 5-1: config 0 descriptor?? [ 1023.754467][T14714] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1023.968691][ T2361] pvrusb2: Invalid write control endpoint [ 1024.019570][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2454'. [ 1024.392655][T15981] binder: 15978:15981 ioctl c0306201 0 returned -14 [ 1024.548516][ T2361] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1024.596880][ T2361] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1024.858220][ T30] audit: type=1326 audit(1779472996.850:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1024.957720][T15988] loop5: detected capacity change from 0 to 512 [ 1024.985214][T15983] bond2: option min_links: invalid value (18446744073709551612) [ 1025.028636][ T30] audit: type=1326 audit(1779472996.890:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.053905][T15983] bond2: option min_links: allowed values 0 - 2147483647 [ 1025.058685][T15988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.075519][T15988] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.110431][T15983] bond2 (unregistering): Released all slaves [ 1025.154580][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2457'. [ 1025.177655][ T30] audit: type=1326 audit(1779472996.890:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.276434][T15755] usb 5-1: USB disconnect, device number 50 [ 1025.292979][ T30] audit: type=1326 audit(1779472996.890:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.329731][ T30] audit: type=1326 audit(1779472996.890:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.362082][ T30] audit: type=1326 audit(1779472996.900:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.509688][ T30] audit: type=1326 audit(1779472996.900:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde84b5d68e code=0x7ffc0000 [ 1025.541991][ T30] audit: type=1326 audit(1779472996.900:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.574773][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.669911][ T30] audit: type=1326 audit(1779472996.900:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde84b9ce59 code=0x7ffc0000 [ 1025.779040][ T30] audit: type=1326 audit(1779472996.900:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.5.2457" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde84b5d68e code=0x7ffc0000 [ 1025.853413][T16012] loop3: detected capacity change from 0 to 512 [ 1025.887565][T16012] EXT4-fs: Ignoring removed i_version option [ 1025.920945][T16012] EXT4-fs: Ignoring removed nobh option [ 1025.977893][T16012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1026.007426][T16012] EXT4-fs (loop3): 1 truncate cleaned up [ 1026.037847][T16012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.160917][T16018] sg_write: data in/out 396253/266 bytes for SCSI command 0x0-- guessing data in; [ 1026.160917][T16018] program syz.0.2464 not setting count and/or reply_len properly [ 1026.196812][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.244576][T16010] loop5: detected capacity change from 0 to 8192 [ 1026.254393][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 1026.588931][T16010] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 1026.708444][T16010] FAT-fs (loop5): Filesystem has been set read-only [ 1027.304074][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2472'. [ 1028.717004][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1028.734544][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1028.751347][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1028.771449][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1028.780141][T16053] loop5: detected capacity change from 0 to 512 [ 1028.791286][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1028.826083][T16053] EXT4-fs: Ignoring removed i_version option [ 1028.891041][T16053] EXT4-fs: Ignoring removed nobh option [ 1028.914655][T16059] xt_hashlimit: size too large, truncated to 1048576 [ 1028.936741][T16053] /dev/loop5: Can't open blockdev [ 1029.208242][T16070] nbd: couldn't find a device at index -2133000188 [ 1030.369510][T16084] loop3: detected capacity change from 0 to 256 [ 1030.506558][T16090] fuse: Unknown parameter '' [ 1030.551391][T16088] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1030.585380][T16088] FAT-fs (loop3): Filesystem has been set read-only [ 1030.723425][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2489'. [ 1031.272671][ T4941] Bluetooth: hci5: command tx timeout [ 1031.281088][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 1034.100929][T16111] loop5: detected capacity change from 0 to 512 [ 1034.111561][T16111] EXT4-fs: Ignoring removed i_version option [ 1034.120516][T16111] EXT4-fs: Ignoring removed nobh option [ 1034.127094][T16111] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1034.146241][T16111] EXT4-fs (loop5): 1 truncate cleaned up [ 1034.156832][T16111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.259960][T16117] FAULT_INJECTION: forcing a failure. [ 1034.259960][T16117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.345735][T16117] CPU: 1 UID: 0 PID: 16117 Comm: syz.1.2495 Not tainted syzkaller #0 PREEMPT(full) [ 1034.345769][T16117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1034.345785][T16117] Call Trace: [ 1034.345795][T16117] [ 1034.345806][T16117] dump_stack_lvl+0xe8/0x150 [ 1034.345841][T16117] should_fail_ex+0x412/0x560 [ 1034.345883][T16117] _copy_from_user+0x2d/0xb0 [ 1034.345925][T16117] memdup_user+0x5e/0xd0 [ 1034.345952][T16117] strndup_user+0x68/0xd0 [ 1034.345978][T16117] __se_sys_fsconfig+0x5f1/0x820 [ 1034.346011][T16117] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1034.346034][T16117] ? ksys_write+0x242/0x270 [ 1034.346076][T16117] ? __pfx_ksys_write+0x10/0x10 [ 1034.346120][T16117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1034.346161][T16117] ? __x64_sys_fsconfig+0x20/0xc0 [ 1034.346186][T16117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.346214][T16117] do_syscall_64+0x15f/0xf80 [ 1034.346253][T16117] ? trace_irq_disable+0x3b/0x140 [ 1034.346300][T16117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.346326][T16117] RIP: 0033:0x7f502519ce59 [ 1034.346349][T16117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.346371][T16117] RSP: 002b:00007f502607f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1034.346398][T16117] RAX: ffffffffffffffda RBX: 00007f5025415fa0 RCX: 00007f502519ce59 [ 1034.346417][T16117] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1034.346434][T16117] RBP: 00007f502607f090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.346454][T16117] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1034.346470][T16117] R13: 00007f5025416038 R14: 00007f5025415fa0 R15: 00007ffc74fe5e78 [ 1034.346510][T16117] [ 1034.351190][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.770460][T16121] nbd: couldn't find a device at index -2133000188 [ 1034.863020][ T4941] Bluetooth: hci5: command tx timeout [ 1035.638131][T16106] loop6: detected capacity change from 0 to 32768 [ 1035.754922][T16106] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1036.061839][T15752] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1036.098613][T16106] XFS (loop6): Ending clean mount [ 1036.184290][ T4941] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1036.253816][T15752] usb 6-1: Using ep0 maxpacket: 16 [ 1036.361100][T15752] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1036.537162][T15752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.759392][T15752] usb 6-1: Product: syz [ 1036.872250][T15752] usb 6-1: Manufacturer: syz [ 1036.967794][ T4941] Bluetooth: hci5: command tx timeout [ 1037.001858][ T5784] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1037.023625][T15752] usb 6-1: SerialNumber: syz [ 1037.176206][T15752] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1037.200078][T15752] r8152-cfgselector 6-1: config 0 descriptor?? [ 1037.276885][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1037.353811][ T5784] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1037.427060][T16144] loop3: detected capacity change from 0 to 256 [ 1037.451372][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.538295][ T7474] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1037.554210][ T5784] usb 2-1: Product: syz [ 1037.555727][T16143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1037.596288][ T5784] usb 2-1: Manufacturer: syz [ 1037.613354][ T5784] usb 2-1: SerialNumber: syz [ 1037.622190][ T5784] usb 2-1: config 0 descriptor?? [ 1037.762433][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.811472][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.854037][T16050] bridge_slave_0: entered allmulticast mode [ 1037.942610][T16050] bridge_slave_0: entered promiscuous mode [ 1037.990372][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.039113][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.062252][T16050] bridge_slave_1: entered allmulticast mode [ 1038.091312][T16050] bridge_slave_1: entered promiscuous mode [ 1038.131355][ T5784] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1038.199875][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.240321][ T5784] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1038.308764][ T5784] usb 2-1: media controller created [ 1038.328022][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.369908][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.402932][T16150] fuse: Unknown parameter '' [ 1038.418303][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.032564][ T50] Bluetooth: hci5: command tx timeout [ 1039.447607][T15737] r8152-cfgselector 6-1: USB disconnect, device number 55 [ 1039.459314][ T5784] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1039.492175][T16159] loop6: detected capacity change from 0 to 512 [ 1039.498558][T16050] team0: Port device team_slave_0 added [ 1039.501506][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1040.091163][T16159] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1040.137365][ T5784] usb 2-1: USB disconnect, device number 75 [ 1040.178765][T16159] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1040.198644][T16050] team0: Port device team_slave_1 added [ 1040.240010][T16159] EXT4-fs (loop6): mount failed [ 1040.439707][ T5784] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1040.545326][T16166] loop5: detected capacity change from 0 to 512 [ 1040.559326][T16166] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.2503: missing EA_INODE flag [ 1040.571358][T16166] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1040.571749][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1040.572034][T16166] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2503: error while reading EA inode 12 err=-117 [ 1040.581122][ C0] EXT4-fs (loop5): initial error at time 1779473012: ext4_xattr_inode_iget:441: inode 12 [ 1040.581174][ C0] EXT4-fs (loop5): last error at time 1779473012: ext4_xattr_inode_iget:441: inode 12 [ 1040.658809][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.665951][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.693951][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.789708][T16166] loop5: lost filesystem error report for type 5 error -117 [ 1040.870786][T16166] EXT4-fs (loop5): 1 orphan inode deleted [ 1041.337964][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.353988][T16166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.382614][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.526104][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.797274][T16050] hsr_slave_0: entered promiscuous mode [ 1041.831333][T16050] hsr_slave_1: entered promiscuous mode [ 1041.873380][T16050] debugfs: 'hsr0' already exists in 'hsr' [ 1041.907299][T16050] Cannot create hsr debugfs directory [ 1041.940986][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.120600][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'. [ 1043.759763][T16194] loop6: detected capacity change from 0 to 4096 [ 1043.932263][T16200] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1045.851827][ T5784] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1045.886295][T16050] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1045.946452][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.989630][T16050] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1046.007629][ T5784] usb 2-1: device descriptor read/64, error -71 [ 1046.076840][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.113980][T16050] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1046.148152][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.326322][T16050] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1046.361202][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.375422][ T5784] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1047.167809][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1047.211816][ T5784] usb 2-1: device descriptor read/64, error -71 [ 1047.329717][ T5784] usb usb2-port1: attempt power cycle [ 1047.427115][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.465798][ T24] usb 1-1: config 0 has no interface number 0 [ 1047.485393][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1047.510317][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.530941][ T24] usb 1-1: Product: syz [ 1047.564474][ T24] usb 1-1: Manufacturer: syz [ 1047.587148][ T24] usb 1-1: SerialNumber: syz [ 1047.636244][ T24] usb 1-1: config 0 descriptor?? [ 1047.675000][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.684246][ T5784] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1047.688048][T16226] loop5: detected capacity change from 0 to 512 [ 1047.711694][T16226] EXT4-fs: Ignoring removed i_version option [ 1047.744462][T16226] EXT4-fs: Ignoring removed nobh option [ 1047.745992][ T5784] usb 2-1: device descriptor read/8, error -71 [ 1047.766381][T16226] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1047.833300][T16050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.847689][T16226] EXT4-fs (loop5): 1 truncate cleaned up [ 1047.878843][T16226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.898834][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.906187][ T9838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.947350][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 1047.971210][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.978731][ T9838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.051857][ T5784] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1048.176437][ T5784] usb 2-1: device descriptor read/8, error -71 [ 1048.282268][ T5625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.324077][ T5784] usb usb2-port1: unable to enumerate USB device [ 1048.717777][ T24] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1048.802894][ T24] usb 1-1: USB disconnect, device number 39 [ 1048.835806][T16244] program syz.6.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.888124][T16244] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1048.973377][T16246] loop3: detected capacity change from 0 to 8 [ 1048.978487][T16243] loop5: detected capacity change from 0 to 4096 [ 1048.992288][T16244] loop6: detected capacity change from 0 to 1024 [ 1049.027883][T16244] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1049.069088][T16248] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.107112][T16244] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 5: comm syz.6.2524: lblock 5 mapped to illegal pblock 5 (length 1) [ 1049.132498][T16244] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1049.132972][T16244] __quota_error: 39 callbacks suppressed [ 1049.132990][T16244] Quota error (device loop6): write_blk: dquota write failed [ 1049.143680][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1049.143710][ C0] EXT4-fs (loop6): initial error at time 1779473021: ext4_map_blocks:833: inode 3: block 5 [ 1049.143764][ C0] EXT4-fs (loop6): last error at time 1779473021: ext4_map_blocks:833: inode 3: block 5 [ 1049.312068][T16244] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1049.916625][T16244] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1049.999586][T16244] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2524: Failed to acquire dquot type 0 [ 1050.099181][T16244] loop6: lost filesystem error report for type 5 error -117 [ 1050.099595][T16244] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2524: lblock 5 mapped to illegal pblock 5 (length 1) [ 1050.150647][T16244] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1050.154063][T16244] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1050.332016][T16244] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1050.367617][T16244] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2524: Failed to acquire dquot type 0 [ 1050.396482][T16255] loop5: detected capacity change from 0 to 512 [ 1050.441185][T16255] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1050.489843][T16244] loop6: lost filesystem error report for type 5 error -117 [ 1050.489859][T16255] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1050.489927][T16255] EXT4-fs (loop5): mount failed [ 1050.684146][T16244] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2524: Freeing blocks not in datazone - block = 0, count = 4096 [ 1051.116135][T16244] loop6: lost filesystem error report for type 5 error -117 [ 1051.125076][T16244] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2524: lblock 5 mapped to illegal pblock 5 (length 1) [ 1051.162159][T16244] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1051.172152][T16244] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1051.287373][T16244] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1051.541993][T16244] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2524: Failed to acquire dquot type 0 [ 1051.652191][T16244] loop6: lost filesystem error report for type 5 error -117 [ 1051.841092][T16244] EXT4-fs (loop6): 1 orphan inode deleted [ 1051.911596][T16244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.257443][ T7474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.381303][T16272] loop5: detected capacity change from 0 to 128 [ 1052.430719][T16272] FAT-fs (loop5): bogus sectors per cluster 0 [ 1052.456462][T16272] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1052.520238][T16276] loop6: detected capacity change from 0 to 256 [ 1052.821351][T16279] random: crng reseeded on system resumption [ 1053.389404][T16280] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1053.421840][T16280] FAT-fs (loop6): Filesystem has been set read-only [ 1053.746396][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.753237][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.796843][T16050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.147203][T16297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.377702][T16297] loop3: detected capacity change from 0 to 4096 [ 1054.492243][T16297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.772219][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1055.170393][T16297] rdma_op ffff8880353cc1f0 conn xmit_rdma 0000000000000000 [ 1055.221098][T16309] loop5: detected capacity change from 0 to 512 [ 1055.299464][T16313] program syz.6.2541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.310717][T16313] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1055.325129][T16309] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1055.344077][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1055.354489][T16313] loop6: detected capacity change from 0 to 1024 [ 1055.411848][ T24] usb 1-1: config 0 has no interface number 0 [ 1055.417142][T16309] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1055.441904][T16313] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1055.452843][T16309] EXT4-fs (loop5): mount failed [ 1055.567578][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1055.594524][T16313] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 5: comm syz.6.2541: lblock 5 mapped to illegal pblock 5 (length 1) [ 1055.630643][T16313] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1055.638552][T16313] Quota error (device loop6): write_blk: dquota write failed [ 1055.647884][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1055.647911][ C1] EXT4-fs (loop6): initial error at time 1779473027: ext4_map_blocks:833: inode 3: block 5 [ 1055.647968][ C1] EXT4-fs (loop6): last error at time 1779473027: ext4_map_blocks:833: inode 3: block 5 [ 1055.688432][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.724973][T16050] veth0_vlan: entered promiscuous mode [ 1055.758610][ T24] usb 1-1: Product: syz [ 1055.785327][ T24] usb 1-1: Manufacturer: syz [ 1055.827276][T16313] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1055.842140][T15737] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1055.877540][ T24] usb 1-1: SerialNumber: syz [ 1056.105010][T16313] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1056.313136][T16050] veth1_vlan: entered promiscuous mode [ 1056.320064][ T24] usb 1-1: config 0 descriptor?? [ 1056.320923][T16313] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2541: Failed to acquire dquot type 0 [ 1056.405713][T16313] loop6: lost filesystem error report for type 5 error -117 [ 1056.406146][T16313] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2541: lblock 5 mapped to illegal pblock 5 (length 1) [ 1056.478545][T15737] usb 4-1: config index 0 descriptor too short (expected 45, got 21) [ 1056.547872][T15737] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1056.550566][T16050] veth0_macvtap: entered promiscuous mode [ 1056.586917][T15737] usb 4-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.605286][T15737] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1056.614330][T16313] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1056.615815][T16313] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1056.638726][T16313] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1056.661689][T15737] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1056.670678][T16050] veth1_macvtap: entered promiscuous mode [ 1056.692575][T15737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.694170][T16313] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2541: Failed to acquire dquot type 0 [ 1056.722960][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 1056.765047][T16322] loop5: detected capacity change from 0 to 512 [ 1056.783503][T15737] usb 4-1: Product: syz [ 1056.798872][T15737] usb 4-1: Manufacturer: syz [ 1056.810430][T16313] loop6: lost filesystem error report for type 5 error -117 [ 1056.815938][T16050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.821117][T15737] usb 4-1: SerialNumber: syz [ 1056.831956][T16313] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2541: Freeing blocks not in datazone - block = 0, count = 4096 [ 1056.858189][T16322] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1056.913736][T16050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.939823][T16313] loop6: lost filesystem error report for type 5 error -117 [ 1056.947959][T16313] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2541: lblock 5 mapped to illegal pblock 5 (length 1) [ 1057.023370][ T1169] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.057149][T16322] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1057.068355][T16313] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1057.097792][T16313] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 1057.153842][T16313] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1057.171958][T16322] EXT4-fs (loop5): mount failed [ 1057.196589][ T135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.268326][T16313] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.2541: Failed to acquire dquot type 0 [ 1057.300799][ T135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.312808][T16313] loop6: lost filesystem error report for type 5 error -117 [ 1057.403225][T16313] EXT4-fs (loop6): 1 orphan inode deleted [ 1057.708011][ T24] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1057.804009][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 1057.932862][T16313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.949664][T15737] rtl8150 4-1:1.0: couldn't find required endpoints [ 1058.077221][T15737] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1058.077824][ T135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.105956][T15747] usb 1-1: USB disconnect, device number 40 [ 1058.149879][T15737] usb 4-1: USB disconnect, device number 59 [ 1058.180615][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.484269][T16335] loop5: detected capacity change from 0 to 32768 [ 1058.491487][T16335] btrfs: Deprecated parameter 'usebackuproot' [ 1058.498385][T16335] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1058.516855][T16335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2545 (16335) [ 1058.556607][T16335] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1058.567220][T16335] BTRFS info (device loop5): using crc32c checksum algorithm [ 1058.570324][ T7474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.689317][T16124] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1058.743136][T16335] BTRFS error (device loop5): failed to load root extent [ 1058.750359][T16335] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1058.760436][ T13] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1058.775881][T16335] BTRFS warning (device loop5): couldn't read tree root [ 1058.783265][T16335] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1058.803867][T16124] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1058.844317][T16335] BTRFS warning (device loop5): couldn't read tree root [ 1058.851669][T16335] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1058.907547][T16335] BTRFS info (device loop5): rebuilding free space tree [ 1058.940980][T16335] BTRFS info (device loop5): checking UUID tree [ 1058.951038][T16335] BTRFS info (device loop5): enabling ssd optimizations [ 1058.958189][T16335] BTRFS info (device loop5): turning on async discard [ 1058.965034][T16335] BTRFS info (device loop5): enabling free space tree [ 1058.971924][T16335] BTRFS info (device loop5): force clearing of disk cache [ 1058.979432][T16335] BTRFS info (device loop5): enabling auto defrag [ 1058.985934][T16335] BTRFS info (device loop5): trying to use backup root at mount time [ 1058.994072][T16335] BTRFS info (device loop5): use zstd compression, level 3 [ 1059.435985][T16123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.062591][T15752] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1060.171862][T16123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.262438][T15752] usb 4-1: Using ep0 maxpacket: 16 [ 1060.318486][ T5625] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1060.331036][T15752] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 1060.381194][T16123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.389351][T15752] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1060.431807][T16123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.441513][T15752] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.499815][T15752] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1060.791101][T15752] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1060.859556][T15752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.900493][T15752] usb 4-1: Product: syz [ 1060.914303][T15752] usb 4-1: Manufacturer: syz [ 1061.208358][T15752] usb 4-1: SerialNumber: syz [ 1061.270885][ T30] audit: type=1800 audit(1779473033.250:403): pid=16370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2550" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1061.475122][T15752] usb 4-1: 0:2 : does not exist [ 1061.691652][T15752] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1062.098507][T15752] usb 4-1: USB disconnect, device number 60 [ 1062.551431][ T9267] udevd[9267]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.725302][T16386] loop3: detected capacity change from 0 to 512 [ 1062.780642][T16386] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1062.851086][T16386] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1062.884411][T16386] EXT4-fs (loop3): mount failed [ 1064.040516][T16394] loop5: detected capacity change from 0 to 512 [ 1064.054369][T16394] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1064.129648][T16394] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1064.152176][T16394] EXT4-fs (loop5): mount failed [ 1064.513385][T16401] bridge0: port 3(netdevsim1) entered blocking state [ 1064.521042][T16401] bridge0: port 3(netdevsim1) entered disabled state [ 1064.533968][T16401] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 1064.568140][T16402] loop7: detected capacity change from 0 to 128 [ 1064.592075][T16401] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 1064.603646][T16401] bridge0: port 3(netdevsim1) entered blocking state [ 1064.611073][T16401] bridge0: port 3(netdevsim1) entered forwarding state [ 1065.280593][T16402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1065.289040][T16402] System zones: 1-3, 19-19, 35-36 [ 1065.304945][T16402] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1065.320433][T16402] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.553008][T16403] loop3: detected capacity change from 0 to 32768 [ 1065.560523][T16403] btrfs: Deprecated parameter 'usebackuproot' [ 1065.566786][T16403] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1065.633009][T16403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2558 (16403) [ 1065.652711][T16403] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1065.662994][T16403] BTRFS info (device loop3): using crc32c checksum algorithm [ 1065.687402][ T140] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1065.721651][T16403] BTRFS error (device loop3): failed to load root extent [ 1065.729133][T16403] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1065.742849][ T36] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1066.119505][T16403] BTRFS warning (device loop3): couldn't read tree root [ 1066.126732][T16403] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1066.148202][T16123] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1066.265059][T16403] BTRFS warning (device loop3): couldn't read tree root [ 1066.272143][T16403] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1066.276429][T16050] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1066.464163][T16403] BTRFS info (device loop3): rebuilding free space tree [ 1066.586825][T16403] BTRFS info (device loop3): checking UUID tree [ 1066.599587][T16403] BTRFS info (device loop3): enabling ssd optimizations [ 1066.607669][T16403] BTRFS info (device loop3): turning on async discard [ 1066.618626][T16403] BTRFS info (device loop3): enabling free space tree [ 1066.625732][T16403] BTRFS info (device loop3): force clearing of disk cache [ 1066.634146][T16403] BTRFS info (device loop3): enabling auto defrag [ 1066.641214][T16403] BTRFS info (device loop3): trying to use backup root at mount time [ 1066.650003][T16403] BTRFS info (device loop3): use zstd compression, level 3 [ 1066.751821][ T5762] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1067.715386][T16429] loop7: detected capacity change from 0 to 4096 [ 1067.744308][ T5762] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.777853][ T5626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1067.807394][ T5762] usb 7-1: config 0 has no interface number 0 [ 1067.817098][ T5784] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1067.847001][ T5762] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1067.883726][ T5762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.921568][ T5762] usb 7-1: Product: syz [ 1067.950808][T16438] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.961770][ T5762] usb 7-1: Manufacturer: syz [ 1068.006118][ T5762] usb 7-1: SerialNumber: syz [ 1068.042979][ T5784] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1068.060520][ T5762] usb 7-1: config 0 descriptor?? [ 1068.115441][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.154803][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.166811][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1069.192415][ T5762] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1069.211813][ T5784] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1069.216301][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 1069.233444][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.322393][ T5784] usb 2-1: config 0 descriptor?? [ 1069.599958][T16451] netlink: 'syz.5.2566': attribute type 1 has an invalid length. [ 1069.642625][ T5629] usb 7-1: USB disconnect, device number 48 [ 1070.008871][ T5784] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 1070.139344][ T5784] holtek_kbd 0003:04D9:A055.000D: unknown main item tag 0x0 [ 1070.686272][T16451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1070.708076][ T5784] holtek_kbd 0003:04D9:A055.000D: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 1070.803851][ T5784] usb 2-1: USB disconnect, device number 80 [ 1070.884652][T16454] vlan1: entered allmulticast mode [ 1070.927509][T16454] bond1: entered allmulticast mode [ 1071.090664][T16457] bond1: (slave geneve2): making interface the new active one [ 1071.178503][T16457] geneve2: entered allmulticast mode [ 1071.259620][T16465] fido_id[16465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1071.334373][T16457] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1071.392316][T16460] bridge0: port 3(netdevsim1) entered blocking state [ 1071.401650][T16460] bridge0: port 3(netdevsim1) entered disabled state [ 1071.409965][T16460] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1071.422310][T16460] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1071.430130][T16460] bridge0: port 3(netdevsim1) entered blocking state [ 1071.436936][T16460] bridge0: port 3(netdevsim1) entered forwarding state [ 1071.700287][T16469] loop7: detected capacity change from 0 to 8192 [ 1074.348909][T16491] FAULT_INJECTION: forcing a failure. [ 1074.348909][T16491] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.432671][T16491] CPU: 0 UID: 0 PID: 16491 Comm: syz.0.2572 Not tainted syzkaller #0 PREEMPT(full) [ 1074.432705][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1074.432721][T16491] Call Trace: [ 1074.432731][T16491] [ 1074.432742][T16491] dump_stack_lvl+0xe8/0x150 [ 1074.432777][T16491] should_fail_ex+0x412/0x560 [ 1074.432818][T16491] should_failslab+0xa8/0x100 [ 1074.432860][T16491] ? security_file_alloc+0x34/0x310 [ 1074.432889][T16491] kmem_cache_alloc_noprof+0x87/0x650 [ 1074.432922][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.432952][T16491] ? rcu_is_watching+0x15/0xb0 [ 1074.432985][T16491] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1074.433023][T16491] security_file_alloc+0x34/0x310 [ 1074.433055][T16491] init_file+0x90/0x2b0 [ 1074.433088][T16491] alloc_empty_file+0x74/0x1d0 [ 1074.433120][T16491] path_openat+0x10f/0x3860 [ 1074.433156][T16491] ? is_bpf_text_address+0x26/0x2b0 [ 1074.433195][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433224][T16491] ? is_bpf_text_address+0x292/0x2b0 [ 1074.433250][T16491] ? is_bpf_text_address+0x26/0x2b0 [ 1074.433281][T16491] ? kernel_text_address+0xa5/0xe0 [ 1074.433319][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433348][T16491] ? __kernel_text_address+0xd/0x30 [ 1074.433384][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433413][T16491] ? unwind_get_return_address+0x4d/0x90 [ 1074.433446][T16491] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1074.433485][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433514][T16491] ? arch_stack_walk+0xfb/0x150 [ 1074.433557][T16491] ? do_getname+0x2e/0x250 [ 1074.433584][T16491] ? __pfx_path_openat+0x10/0x10 [ 1074.433622][T16491] ? stack_trace_save+0xa9/0x100 [ 1074.433662][T16491] ? __pfx_stack_trace_save+0x10/0x10 [ 1074.433702][T16491] ? do_getname+0x2e/0x250 [ 1074.433729][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433759][T16491] ? stack_depot_save_flags+0x33/0x810 [ 1074.433807][T16491] do_file_open+0x23e/0x4a0 [ 1074.433852][T16491] ? __pfx_do_file_open+0x10/0x10 [ 1074.433917][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433950][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.433979][T16491] ? build_open_flags+0x44a/0x5b0 [ 1074.434017][T16491] file_open_name+0x162/0x1c0 [ 1074.434050][T16491] ? __pfx_file_open_name+0x10/0x10 [ 1074.434087][T16491] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1074.434116][T16491] ? do_getname+0x151/0x250 [ 1074.434148][T16491] __se_sys_acct+0xf3/0x9c0 [ 1074.434199][T16491] ? __pfx___se_sys_acct+0x10/0x10 [ 1074.434245][T16491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.434273][T16491] do_syscall_64+0x15f/0xf80 [ 1074.434312][T16491] ? trace_irq_disable+0x3b/0x140 [ 1074.434358][T16491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.434384][T16491] RIP: 0033:0x7f742f99ce59 [ 1074.434406][T16491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.434427][T16491] RSP: 002b:00007f74308b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1074.434452][T16491] RAX: ffffffffffffffda RBX: 00007f742fc16090 RCX: 00007f742f99ce59 [ 1074.434471][T16491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1074.434487][T16491] RBP: 00007f74308b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.434503][T16491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.434518][T16491] R13: 00007f742fc16128 R14: 00007f742fc16090 R15: 00007ffe31d771a8 [ 1074.434556][T16491] [ 1074.928946][T16495] loop6: detected capacity change from 0 to 512 [ 1075.017086][ T5629] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1075.054050][T16495] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1075.191104][T16495] EXT4-fs (loop6): 1 truncate cleaned up [ 1075.202438][ T5629] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 1075.246514][T16495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.270684][ T5629] usb 2-1: config 0 has no interface number 0 [ 1075.297686][ T5629] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1075.394462][ T5629] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1075.931771][ T5629] usb 2-1: config 0 interface 153 has no altsetting 0 [ 1076.007174][ T5629] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1076.066530][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.110811][ T5629] usb 2-1: Product: syz [ 1076.130194][ T5629] usb 2-1: Manufacturer: syz [ 1076.198456][ T5629] usb 2-1: SerialNumber: syz [ 1076.235868][ T5629] usb 2-1: config 0 descriptor?? [ 1076.348543][ T7474] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.716793][T16511] loop7: detected capacity change from 0 to 4096 [ 1076.766125][T15752] IPVS: starting estimator thread 0... [ 1076.894589][T16515] IPVS: using max 25 ests per chain, 60000 per kthread [ 1076.924879][T16517] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1077.264019][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2584'. [ 1078.579638][ T5629] hub 2-1:0.153: bad descriptor, ignoring hub [ 1078.600607][ T5629] hub 2-1:0.153: probe with driver hub failed with error -5 [ 1078.643645][ T5629] sierra 2-1:0.153: Sierra USB modem converter detected [ 1078.739333][ T5629] usb 2-1: USB disconnect, device number 81 [ 1078.795623][ T5629] sierra 2-1:0.153: device disconnected [ 1078.824487][T16526] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1081.840300][T16551] loop5: detected capacity change from 0 to 32768 [ 1081.847685][T16551] btrfs: Deprecated parameter 'usebackuproot' [ 1081.854076][T16551] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1081.865326][T16551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2593 (16551) [ 1081.962161][T16551] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1081.972627][T16551] BTRFS info (device loop5): using crc32c checksum algorithm [ 1082.088209][ T1098] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1082.106844][T16551] BTRFS error (device loop5): failed to load root extent [ 1082.117205][T16551] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1082.126446][ T140] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1082.187769][T16574] FAULT_INJECTION: forcing a failure. [ 1082.187769][T16574] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.201213][T16551] BTRFS warning (device loop5): couldn't read tree root [ 1082.208418][T16551] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1082.218774][T16123] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1082.337263][T16574] CPU: 1 UID: 0 PID: 16574 Comm: syz.3.2594 Not tainted syzkaller #0 PREEMPT(full) [ 1082.337299][T16574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1082.337316][T16574] Call Trace: [ 1082.337326][T16574] [ 1082.337337][T16574] dump_stack_lvl+0xe8/0x150 [ 1082.337373][T16574] should_fail_ex+0x412/0x560 [ 1082.337414][T16574] should_failslab+0xa8/0x100 [ 1082.337455][T16574] ? alloc_vfsmnt+0x23/0x420 [ 1082.337496][T16574] kmem_cache_alloc_noprof+0x87/0x650 [ 1082.337532][T16574] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.337574][T16574] alloc_vfsmnt+0x23/0x420 [ 1082.337618][T16574] clone_mnt+0x4b/0x9a0 [ 1082.337640][T16574] ? _raw_spin_unlock+0x28/0x50 [ 1082.337676][T16574] ? get_mountpoint+0x26f/0x510 [ 1082.337719][T16574] lock_mount_exact+0x157/0x740 [ 1082.337747][T16574] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.337789][T16574] open_new_namespace+0x286/0xd00 [ 1082.337839][T16574] ? __pfx_open_new_namespace+0x10/0x10 [ 1082.337905][T16574] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1082.337934][T16574] ? do_getname+0x151/0x250 [ 1082.337966][T16574] vfs_open_tree+0x32d/0x3d0 [ 1082.338007][T16574] ? __pfx_vfs_open_tree+0x10/0x10 [ 1082.338053][T16574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.338082][T16574] __x64_sys_open_tree+0x96/0x110 [ 1082.338114][T16574] do_syscall_64+0x15f/0xf80 [ 1082.338153][T16574] ? trace_irq_disable+0x3b/0x140 [ 1082.338207][T16574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.338233][T16574] RIP: 0033:0x7f2b1499ce59 [ 1082.338256][T16574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.338277][T16574] RSP: 002b:00007f2b15888028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1082.338303][T16574] RAX: ffffffffffffffda RBX: 00007f2b14c15fa0 RCX: 00007f2b1499ce59 [ 1082.338323][T16574] RDX: 0000000000009902 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 1082.338341][T16574] RBP: 00007f2b15888090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.338357][T16574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.338373][T16574] R13: 00007f2b14c16038 R14: 00007f2b14c15fa0 R15: 00007ffd36dcb8a8 [ 1082.338414][T16574] [ 1082.572824][T16551] BTRFS warning (device loop5): couldn't read tree root [ 1082.580199][T16551] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1083.130565][T16551] BTRFS info (device loop5): rebuilding free space tree [ 1083.237323][T16551] BTRFS info (device loop5): checking UUID tree [ 1083.245810][T16551] BTRFS info (device loop5): enabling ssd optimizations [ 1083.252968][T16551] BTRFS info (device loop5): turning on async discard [ 1083.259812][T16551] BTRFS info (device loop5): enabling free space tree [ 1083.267822][T16551] BTRFS info (device loop5): force clearing of disk cache [ 1083.275049][T16551] BTRFS info (device loop5): enabling auto defrag [ 1083.281467][T16551] BTRFS info (device loop5): trying to use backup root at mount time [ 1083.289586][T16551] BTRFS info (device loop5): use zstd compression, level 3 [ 1083.318620][T16581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1083.353677][T16583] loop3: detected capacity change from 0 to 512 [ 1083.411426][T16583] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1083.471556][T16583] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.688549][T16583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.509484][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.698596][ T5625] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1086.006069][T16597] loop3: detected capacity change from 0 to 32768 [ 1086.013486][T16597] btrfs: Deprecated parameter 'usebackuproot' [ 1086.019729][T16597] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1086.052393][T16597] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 31b6656a-cb68-440e-8c46-e2aa6d5388df [ 1086.062598][T16597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2598 (16597) [ 1086.099137][T16597] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1086.109832][T16597] BTRFS info (device loop3): using crc32c checksum algorithm [ 1086.812469][ T135] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1086.834974][T16597] BTRFS error (device loop3): failed to load root extent [ 1086.842306][T16597] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1086.856272][ T48] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1086.871880][T16597] BTRFS warning (device loop3): couldn't read tree root [ 1086.878967][T16597] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1086.887224][T16125] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1086.898014][T16597] BTRFS warning (device loop3): couldn't read tree root [ 1086.905107][T16597] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1086.993423][T16616] fuse: Unknown parameter '' [ 1087.022169][T16597] BTRFS info (device loop3): rebuilding free space tree [ 1087.157251][T16597] BTRFS info (device loop3): checking UUID tree [ 1087.164245][T16597] BTRFS info (device loop3): enabling ssd optimizations [ 1087.171443][T16597] BTRFS info (device loop3): turning on async discard [ 1087.178659][T16597] BTRFS info (device loop3): enabling free space tree [ 1087.185616][T16597] BTRFS info (device loop3): force clearing of disk cache [ 1087.193106][T16597] BTRFS info (device loop3): enabling auto defrag [ 1087.199618][T16597] BTRFS info (device loop3): trying to use backup root at mount time [ 1087.207927][T16597] BTRFS info (device loop3): use zstd compression, level 3 [ 1089.560236][ T5626] BTRFS info (device loop3): last unmount of filesystem 31b6656a-cb68-440e-8c46-e2aa6d5388df [ 1089.662512][T16629] bridge0: port 3(netdevsim1) entered blocking state [ 1089.669967][T16629] bridge0: port 3(netdevsim1) entered disabled state [ 1089.678211][T16629] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1089.709254][T16629] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1089.731634][T16629] bridge0: port 3(netdevsim1) entered blocking state [ 1089.738491][T16629] bridge0: port 3(netdevsim1) entered forwarding state [ 1090.164073][ T2361] pvrusb2: request_firmware fatal error with code=-110 [ 1090.171356][ T2361] pvrusb2: Failure uploading firmware1 [ 1090.176985][ T2361] pvrusb2: Device initialization was not successful. [ 1090.185157][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1090.195405][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1090.209133][T15755] pvrusb2: Device being rendered inoperable [ 1090.807843][T16636] loop5: detected capacity change from 0 to 512 [ 1091.161373][T16636] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1091.194186][T16636] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 1091.241437][T16636] EXT4-fs (loop5): mount failed [ 1092.110551][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2609'. [ 1093.164052][T16656] loop5: detected capacity change from 0 to 4096 [ 1093.207530][T16656] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1093.684507][T16665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1093.750333][T16656] ntfs3(loop5): ino=1c, mi_enum_attr [ 1093.766884][T16656] ntfs3(loop5): ino=1c, mi_enum_attr [ 1093.776910][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 1095.002032][T15755] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1095.171812][T15755] usb 6-1: Using ep0 maxpacket: 16 [ 1095.203534][T15755] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1095.233045][T15755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.259607][T15755] usb 6-1: Product: syz [ 1095.276835][T15755] usb 6-1: Manufacturer: syz [ 1095.314742][T15755] usb 6-1: SerialNumber: syz [ 1095.857603][T15755] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1095.896454][T15755] r8152-cfgselector 6-1: config 0 descriptor?? [ 1096.164497][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.225670][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.740605][T16690] loop3: detected capacity change from 0 to 32768 [ 1096.808430][T16690] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1096.897531][T16690] XFS (loop3): Ending clean mount [ 1097.042421][ T5626] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1097.645291][T16718] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2622'. [ 1097.724166][T16688] loop7: detected capacity change from 0 to 32768 [ 1097.823842][T16720] loop3: detected capacity change from 0 to 128 [ 1097.921463][T16720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 1097.930306][T16720] System zones: 1-3, 19-19, 35-36 [ 1098.005679][T16720] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1098.034911][T16720] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.498032][ T5626] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1098.579258][T15741] r8152-cfgselector 6-1: USB disconnect, device number 56 [ 1099.825507][T16740] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1101.625741][T16755] hsr0: entered promiscuous mode [ 1101.735069][T16760] xt_hashlimit: size too large, truncated to 1048576 [ 1101.777147][T16744] hsr0: left promiscuous mode [ 1101.851838][T15747] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1102.037724][T15747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1102.091203][T15747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.102632][T16765] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.123340][T16765] binder: 16764:16765 ioctl 4018620d 200000004a80 returned -16 [ 1102.137669][T15747] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1102.159643][T15747] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1102.203960][T15747] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1102.261343][T15747] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1102.294899][T15747] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1102.329159][T15747] usb 4-1: string descriptor 0 read error: -22 [ 1102.349179][T15747] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1102.371269][T15747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.398908][T15755] IPVS: starting estimator thread 0... [ 1102.421876][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1102.491899][T16773] IPVS: using max 24 ests per chain, 57600 per kthread [ 1102.594294][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1102.619307][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.659539][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1102.689936][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.708565][ T24] usb 1-1: config 0 descriptor?? [ 1103.204509][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.228356][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.270216][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.301077][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.329934][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.356702][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.402201][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.413021][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.424259][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.432545][ T24] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0 [ 1103.451435][ T24] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1103.648332][T15747] usb 4-1: 2:0: sticky mixer values (-11747/0/1 => 0), disabling [ 1103.767264][ T24] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device [ 1103.832589][ T24] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse [ 1103.860284][ T24] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -71 [ 1103.933426][ T24] usb 1-1: USB disconnect, device number 41 [ 1104.011467][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 1104.083517][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 1104.246742][T15747] usb 4-1: USB disconnect, device number 61 [ 1104.313050][T15755] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1104.477615][T16807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.540681][T15755] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.615787][T16807] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1104.707123][T15755] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1104.772770][T15755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1104.831895][T15755] usb 8-1: Product: syz [ 1104.857969][T15755] usb 8-1: Manufacturer: syz [ 1104.902231][T15755] usb 8-1: SerialNumber: syz [ 1105.021456][T16817] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1105.291047][T15755] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1105.441093][ T30] audit: type=1800 audit(1779473077.440:404): pid=16825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2656" name="bus" dev="tmpfs" ino=2661 res=0 errno=0 [ 1105.550616][T15755] usb 8-1: USB disconnect, device number 2 [ 1105.704638][T15755] usblp0: removed [ 1106.242024][T15755] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1106.361916][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1106.414017][T15755] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 1106.443781][T15755] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1106.492152][T15755] usb 1-1: config 150 has no interface number 0 [ 1106.534882][T15755] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1106.556291][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1106.584723][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1106.606260][T15755] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1106.635630][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1106.646452][T15755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.684557][T15755] usb 1-1: Product: syz [ 1106.698463][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1106.713364][T15755] usb 1-1: Manufacturer: syz [ 1106.726918][T15755] usb 1-1: SerialNumber: syz [ 1106.743662][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.808332][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1106.849505][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.997995][T15755] xr_serial 1-1:150.204: skipping garbage [ 1107.045217][T15755] xr_serial 1-1:150.204: xr_serial converter detected [ 1107.091124][T15755] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1107.112182][T15755] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1107.159682][ T24] usb 4-1: usb_control_msg returned -32 [ 1107.217018][T15755] usb 1-1: USB disconnect, device number 42 [ 1107.232962][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1107.325271][T15755] xr_serial 1-1:150.204: device disconnected [ 1107.392390][ T5629] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1107.600115][ T5629] usb 2-1: config 0 has no interfaces? [ 1107.654260][ T5629] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1107.702254][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.761873][ T5629] usb 2-1: config 0 descriptor?? [ 1108.102565][T15741] usb 2-1: USB disconnect, device number 82 [ 1108.112331][T15755] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1108.316789][T15755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.381683][T15755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.449507][T15755] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1108.454400][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2670'. [ 1108.502387][T15755] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1108.545318][T15755] usb 1-1: Manufacturer: syz [ 1108.597884][T15755] usb 1-1: config 0 descriptor?? [ 1108.709135][ T24] usb 4-1: USB disconnect, device number 62 [ 1109.030144][T16863] binder: BINDER_SET_CONTEXT_MGR already set [ 1109.039849][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 1109.070569][T16863] binder: 16856:16863 ioctl 4018620d 200000004a80 returned -16 [ 1109.090017][T16857] erspan1: entered promiscuous mode [ 1109.164240][T16857] erspan1: entered allmulticast mode [ 1110.542063][ T5629] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1110.775828][ T5629] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1110.871593][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.912405][ T5629] usb 4-1: Product: syz [ 1110.928485][ T5629] usb 4-1: Manufacturer: syz [ 1110.949582][ T5629] usb 4-1: SerialNumber: syz [ 1110.997341][ T5629] usb 4-1: config 0 descriptor?? [ 1111.160302][T16884] binder_alloc: 16883: pid 16883 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1111.198512][T10517] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1111.244705][ T5629] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1111.292025][T16884] binder_alloc: 16883: pid 16883 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1111.394324][T10517] usb 2-1: Using ep0 maxpacket: 32 [ 1111.424667][T10517] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1111.473957][T10517] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1111.555490][T10517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.625079][T10517] usb 2-1: Product: syz [ 1111.655681][T10517] usb 2-1: Manufacturer: syz [ 1111.690247][T10517] usb 2-1: SerialNumber: syz [ 1111.740820][T10517] usb 2-1: config 0 descriptor?? [ 1111.766771][T16888] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1111.814669][T10517] hub 2-1:0.0: bad descriptor, ignoring hub [ 1111.860477][T10517] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1111.931116][T10517] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 1112.072003][ T24] usb 2-1: USB disconnect, device number 83 [ 1112.072143][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1112.364885][T16902] netlink: 'syz.5.2676': attribute type 3 has an invalid length. [ 1113.324886][ T5629] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1113.393029][ T5629] usb 4-1: USB disconnect, device number 63 [ 1113.477700][T16909] netlink: 'syz.1.2685': attribute type 8 has an invalid length. [ 1113.707285][T16908] No such timeout policy "syz1" [ 1113.743845][T15755] usbhid 1-1:0.0: can't add hid device: -32 [ 1113.785469][T15755] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1114.079945][T15755] usb 1-1: USB disconnect, device number 43 [ 1114.542506][T15755] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1114.712002][T15755] usb 1-1: Using ep0 maxpacket: 8 [ 1114.752553][T15755] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1114.823693][T15755] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1114.874308][T15755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.922271][T15755] usb 1-1: Product: syz [ 1114.951143][T15755] usb 1-1: Manufacturer: syz [ 1114.984507][T15755] usb 1-1: SerialNumber: syz [ 1115.014245][T15755] usb 1-1: config 0 descriptor?? [ 1115.058668][T15755] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1115.176488][T16922] bridge0: port 3(netdevsim1) entered disabled state [ 1115.183589][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.191316][T16922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.202134][ T5629] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1115.211569][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.219764][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.288950][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2697'. [ 1115.355954][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2697'. [ 1115.401993][ T5629] usb 2-1: Using ep0 maxpacket: 32 [ 1115.415812][ T5629] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 1115.458323][ T5629] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1115.528532][ T5629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1115.554724][ T5629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1115.586860][ T5629] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1115.616610][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.647005][ T5629] usb 2-1: Product: syz [ 1115.671025][ T5629] usb 2-1: Manufacturer: syz [ 1115.693436][ T5629] usb 2-1: SerialNumber: syz [ 1115.726450][ T5629] usb 2-1: config 0 descriptor?? [ 1115.751454][T16931] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1115.770973][ T5629] hub 2-1:0.0: bad descriptor, ignoring hub [ 1115.789993][ T5629] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1115.850216][ T5629] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 1116.051281][ T5629] usb 2-1: USB disconnect, device number 84 [ 1116.051375][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1116.091591][T15755] gspca_zc3xx: reg_w_i err -71 [ 1116.498635][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.586540][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.672214][T15755] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1116.672308][T15755] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1116.677414][T15755] usb 1-1: USB disconnect, device number 44 [ 1117.351914][T10517] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1117.537084][T10517] usb 4-1: Using ep0 maxpacket: 32 [ 1117.553243][T10517] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 1117.592278][T10517] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 64, changing to 10 [ 1117.615995][ T48] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.633600][T10517] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49791, setting to 1024 [ 1117.647242][ T48] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.675709][T10517] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1117.714268][ T48] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.730865][T10517] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1117.760996][T16960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1117.769427][ T48] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.786820][T16960] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1117.804695][T10517] usb 4-1: Product: syz [ 1117.804776][T16960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1117.831495][T10517] usb 4-1: Manufacturer: syz [ 1117.860515][T10517] hub 4-1:4.0: USB hub found [ 1117.868090][T16960] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1117.886884][T16960] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1117.908531][T16960] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1118.063807][T10517] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1118.172259][ T5629] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1118.353818][ T5629] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1118.373618][ T5629] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1118.403416][T15752] usb 4-1: USB disconnect, device number 64 [ 1118.408761][ T5629] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1118.428756][ T5629] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1118.456844][ T5629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.493863][T16967] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1118.834071][T15741] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1119.021946][T15741] usb 1-1: Using ep0 maxpacket: 32 [ 1119.055649][T15741] usb 1-1: config 0 has an invalid interface number: 115 but max is 0 [ 1119.076429][T15741] usb 1-1: config 0 has no interface number 0 [ 1119.082948][T15741] usb 1-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid maxpacket 14848, setting to 1024 [ 1119.105552][T15741] usb 1-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1119.125086][T15741] usb 1-1: config 0 interface 115 has no altsetting 0 [ 1119.153344][T15741] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 1119.180718][T15741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.201920][T15741] usb 1-1: Product: syz [ 1119.210968][T15741] usb 1-1: Manufacturer: syz [ 1119.216876][ T30] audit: type=1800 audit(1779473091.210:405): pid=16993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2718" name="bus" dev="tmpfs" ino=2623 res=0 errno=0 [ 1119.237857][T15741] usb 1-1: SerialNumber: syz [ 1119.248549][T15741] usb 1-1: config 0 descriptor?? [ 1119.258904][T15741] option 1-1:0.115: GSM modem (1-port) converter detected [ 1119.371846][T15752] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1119.535444][T15752] usb 8-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1119.547283][T15752] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1119.579378][T15752] usb 8-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1119.595737][T15752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.649111][T15752] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1119.823528][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1119.823560][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 1119.829741][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1119.902711][T16999] Bluetooth: hci5: command 0x0c1a tx timeout [ 1120.038352][T17002] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2721'. [ 1120.088287][ T30] audit: type=1326 audit(1779473092.080:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.7.2719" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cccf9ce59 code=0x0 [ 1120.116465][T15755] usb 1-1: USB disconnect, device number 45 [ 1120.132394][T17002] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2721'. [ 1120.180983][T15752] gspca_sn9c2028: read1 error -110 [ 1120.191276][T15755] option 1-1:0.115: device disconnected [ 1120.207150][T15752] gspca_sn9c2028: read1 error -32 [ 1120.224653][T15752] gspca_sn9c2028: read1 error -32 [ 1120.244091][T15752] sn9c2028 8-1:220.0: probe with driver sn9c2028 failed with error -32 [ 1120.421953][T10517] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1120.592867][T10517] usb 2-1: Using ep0 maxpacket: 8 [ 1120.604592][T10517] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1120.614556][T10517] usb 2-1: config 179 has no interface number 0 [ 1120.625408][T10517] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1120.641524][T10517] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1120.657854][T10517] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1120.677656][T10517] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1120.691892][T15741] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1120.699923][T10517] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1120.735515][T10517] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1120.746239][T10517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.768024][T17005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1120.878740][T15741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.978442][T15741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.007355][T15741] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1121.018141][T15741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.027792][ T5629] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1121.056286][T15741] usb 7-1: config 0 descriptor?? [ 1121.066822][ T5629] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input28 [ 1121.404686][T15752] usb 2-1: USB disconnect, device number 85 [ 1121.404695][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1121.404753][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1121.464977][T10517] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 1121.508835][T15741] usbhid 7-1:0.0: can't add hid device: -71 [ 1121.536125][T15741] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1121.635500][ T5629] usb 6-1: USB disconnect, device number 57 [ 1121.635595][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1121.654463][T15741] usb 7-1: USB disconnect, device number 49 [ 1121.993596][T16999] Bluetooth: hci5: command 0x0c1a tx timeout [ 1122.188715][T10517] usb 8-1: USB disconnect, device number 3 [ 1122.383523][ T5629] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1122.465727][T17026] syz_tun: entered allmulticast mode [ 1122.531352][T17026] bond0: entered promiscuous mode [ 1122.531382][T17026] bond_slave_0: entered promiscuous mode [ 1122.531606][T17026] bond_slave_1: entered promiscuous mode [ 1122.575245][ T5629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.627912][ T5629] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1122.630571][ T5629] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1122.630604][ T5629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.630629][ T5629] usb 4-1: Product: syz [ 1122.630649][ T5629] usb 4-1: Manufacturer: syz [ 1122.630668][ T5629] usb 4-1: SerialNumber: syz [ 1122.660036][ T5629] usb 4-1: config 0 descriptor?? [ 1122.678931][ T5629] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1122.700184][ T5629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1122.709988][ T5629] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1122.710060][ T5629] usb 4-1: media controller created [ 1122.750057][ T5629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.007292][ T5629] DVB: Unable to find symbol tda10046_attach() [ 1123.007315][ T5629] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1123.007337][ T5629] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1123.024416][T15755] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1123.173830][T15755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.173871][T15755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.173916][T15755] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1123.173952][T15755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.194462][T15755] usb 6-1: config 0 descriptor?? [ 1123.618138][ T5629] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1123.637541][ T5629] usb 4-1: USB disconnect, device number 65 [ 1123.656740][T15755] hid-steam 0003:28DE:1142.000F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1123.814294][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2733'. [ 1123.824920][T15755] hid-steam 0003:28DE:1142.000F: Steam wireless receiver connected [ 1123.852010][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2733'. [ 1124.063170][T16999] Bluetooth: hci5: command 0x0c1a tx timeout [ 1124.122972][T15755] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1124.210609][T15755] usb 6-1: USB disconnect, device number 58 [ 1124.575302][T17052] fido_id[17052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1124.623288][T15755] hid-steam 0003:28DE:1142.000F: Steam wireless receiver disconnected [ 1125.284805][T17049] hsr0: entered promiscuous mode [ 1125.435179][ T5629] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1125.668025][ T5629] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.709761][ T5629] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.773009][ T5629] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.836969][ T5629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.887170][T17064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1125.907294][ T5629] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1125.938812][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 1126.335005][T17071] hsr_slave_0: left promiscuous mode [ 1126.487130][T17071] hsr_slave_1: left promiscuous mode [ 1126.631080][ T5629] usb 2-1: USB disconnect, device number 86 [ 1126.643466][T17071] hsr0 (unregistering): left promiscuous mode [ 1126.901349][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2749'. [ 1126.953500][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2749'. [ 1127.180334][T17089] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1127.219834][T17089] PKCS7: Only support pkcs7_signedData type [ 1127.365024][T17074] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 1127.516523][T17081] bond1: entered allmulticast mode [ 1127.576936][T17081] vti0: entered allmulticast mode [ 1127.631062][T17085] bond0: entered promiscuous mode [ 1127.680490][T17085] bond_slave_0: entered promiscuous mode [ 1127.718824][T17085] bond_slave_1: entered promiscuous mode [ 1127.782041][ T5629] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1127.997918][ T5629] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1128.049370][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.081839][ T5629] usb 2-1: Product: syz [ 1128.087762][ T5629] usb 2-1: Manufacturer: syz [ 1128.118076][ T5629] usb 2-1: SerialNumber: syz [ 1128.260770][ T5629] usb 2-1: config 0 descriptor?? [ 1128.314921][ T5629] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1129.188278][ T5629] gspca_stk1135: reg_w 0x2 err -110 [ 1129.203015][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.211921][ T5629] gspca_stk1135: Sensor write failed [ 1129.219434][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.225912][ T5629] gspca_stk1135: Sensor write failed [ 1129.234193][T15755] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1129.354806][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.389956][ T5629] gspca_stk1135: Sensor read failed [ 1129.395366][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.401831][ T5629] gspca_stk1135: Sensor read failed [ 1129.407961][ T5629] gspca_stk1135: Detected sensor type unknown (0x0) [ 1129.417329][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.426917][ T5629] gspca_stk1135: Sensor read failed [ 1129.432596][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.439057][ T5629] gspca_stk1135: Sensor read failed [ 1129.449872][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.458585][ T5629] gspca_stk1135: Sensor write failed [ 1129.464392][ T5629] gspca_stk1135: serial bus timeout: status=0x00 [ 1129.470855][ T5629] gspca_stk1135: Sensor write failed [ 1129.479812][ T5629] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1129.537422][T15755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.592908][T15755] usb 6-1: config 0 has no interfaces? [ 1129.619586][T15755] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1129.650708][T15755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.699235][T15755] usb 6-1: Product: syz [ 1129.723810][T15755] usb 6-1: Manufacturer: syz [ 1129.746239][T15755] usb 6-1: SerialNumber: syz [ 1129.788562][T15755] usb 6-1: config 0 descriptor?? [ 1130.051883][ T5629] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1130.232819][ T5629] usb 1-1: Using ep0 maxpacket: 8 [ 1130.251192][ T5629] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1130.283220][ T5629] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1130.324370][ T5629] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1130.357329][ T5629] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1130.378483][ T5629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.445243][ T5629] usb 1-1: config 0 descriptor?? [ 1130.549740][T15752] usb 2-1: USB disconnect, device number 87 [ 1130.615889][T15747] usb 6-1: USB disconnect, device number 59 [ 1130.892770][ T5629] hid_parser_main: 222 callbacks suppressed [ 1130.892797][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1130.976688][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1131.008363][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1131.065432][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1131.101946][T15752] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1131.123655][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1131.170369][ T5629] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1131.202237][ T5629] elan 0003:04F3:0755.0011: unbalanced collection at end of report description [ 1131.241115][ T5629] elan 0003:04F3:0755.0011: Hid Parse failed [ 1131.268786][ T5629] elan 0003:04F3:0755.0011: probe with driver elan failed with error -22 [ 1131.288171][T15752] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 1131.314067][ T5629] usb 1-1: USB disconnect, device number 46 [ 1131.332000][T15752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1131.359024][T15752] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1131.391910][T15752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.406496][T17137] hsr0: entered promiscuous mode [ 1131.436209][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 1131.446188][T15752] usb 2-1: Product: syz [ 1131.472299][T15752] usb 2-1: Manufacturer: syz [ 1131.504043][T15752] usb 2-1: SerialNumber: syz [ 1131.514793][T17137] hsr_slave_0: left promiscuous mode [ 1131.531645][T15752] usb 2-1: config 0 descriptor?? [ 1131.541360][T17137] hsr_slave_1: left promiscuous mode [ 1131.583114][T17137] hsr0 (unregistering): left promiscuous mode [ 1131.614607][T17139] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2768'. [ 1132.052257][T14714] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1132.141002][T15741] usb 2-1: USB disconnect, device number 88 [ 1132.223964][T14714] usb 6-1: config 34 has an invalid interface number: 116 but max is 0 [ 1132.250719][T17147] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1132.259558][T14714] usb 6-1: config 34 has no interface number 0 [ 1132.280231][T14714] usb 6-1: config 34 interface 116 has no altsetting 0 [ 1132.303180][T14714] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 1132.319999][T14714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.330664][T14714] usb 6-1: Product: syz [ 1132.337819][T14714] usb 6-1: Manufacturer: syz [ 1132.342744][T14714] usb 6-1: SerialNumber: syz [ 1132.401119][T17147] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 1132.910159][T14714] comedi comedi5: could not set alternate setting 3 in high speed [ 1132.942348][T14714] usbdux 6-1:34.116: driver 'usbdux' failed to auto-configure device. [ 1133.083282][T14714] usbdux 6-1:34.116: probe with driver usbdux failed with error -71 [ 1133.129184][T14714] usb 6-1: USB disconnect, device number 60 [ 1133.682576][T15752] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1133.883666][T15752] usb 1-1: Using ep0 maxpacket: 32 [ 1133.910735][T15752] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1133.966299][T15752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1134.022742][T15752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1134.060185][T15752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1134.109354][T15752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1134.168967][T15752] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1134.217770][T15752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.257689][T15752] usb 1-1: Product: syz [ 1134.274801][T15752] usb 1-1: Manufacturer: syz [ 1134.298642][T15752] usb 1-1: SerialNumber: syz [ 1134.350459][T15752] usb 1-1: config 0 descriptor?? [ 1134.552575][T15747] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1134.751536][T15747] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.793440][T15747] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1134.823423][T15747] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1134.854122][T15747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.899065][T15747] usb 8-1: Product: syz [ 1134.907133][T15747] usb 8-1: Manufacturer: syz [ 1134.925554][T15747] usb 8-1: SerialNumber: syz [ 1134.964804][T15747] usb 8-1: config 0 descriptor?? [ 1134.996380][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.026804][T15747] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1135.051849][T15752] input input30: Device does not respond to id packet P [ 1135.088423][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.097329][T15747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.120315][T15752] input input30: Device does not respond to id packet B [ 1135.141557][T15747] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1135.162119][T15747] usb 8-1: media controller created [ 1135.162305][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.191992][T15752] input input30: Device does not respond to id packet N [ 1135.203626][T15747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.218038][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.233799][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.260614][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.301870][T15752] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1135.385950][T15752] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 1135.488678][T15752] usb 1-1: USB disconnect, device number 47 [ 1135.524962][T15747] DVB: Unable to find symbol tda10046_attach() [ 1135.544946][T15747] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1135.599926][T15747] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1135.671914][T15741] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1135.871973][T15741] usb 6-1: Using ep0 maxpacket: 32 [ 1135.872470][T17204] loop9: detected capacity change from 0 to 7 [ 1135.882459][T15741] usb 6-1: config 0 has an invalid interface number: 57 but max is 0 [ 1135.892309][T15741] usb 6-1: config 0 has no interface number 0 [ 1135.898848][T15741] usb 6-1: too many endpoints for config 0 interface 57 altsetting 78: 48, using maximum allowed: 30 [ 1135.912647][T15741] usb 6-1: config 0 interface 57 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1135.930863][T15741] usb 6-1: config 0 interface 57 has no altsetting 0 [ 1135.942036][T15755] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1135.945916][T15741] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1135.961212][T15741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.976815][T15741] usb 6-1: Product: syz [ 1135.981302][T17204] Dev loop9: unable to read RDB block 7 [ 1135.990617][T17204] loop9: unable to read partition table [ 1135.996705][T15741] usb 6-1: Manufacturer: syz [ 1136.002986][T17204] loop9: partition table beyond EOD, truncated [ 1136.009585][T15741] usb 6-1: SerialNumber: syz [ 1136.021270][T17204] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1136.034510][T15741] usb 6-1: config 0 descriptor?? [ 1136.064163][T15747] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1136.112111][T15755] usb 2-1: Using ep0 maxpacket: 8 [ 1136.128432][T15747] usb 8-1: USB disconnect, device number 4 [ 1136.144227][T15755] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1136.162275][T15755] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1136.175547][T15755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.184786][T15755] usb 2-1: Product: syz [ 1136.191542][T15755] usb 2-1: Manufacturer: syz [ 1136.198996][T15755] usb 2-1: SerialNumber: syz [ 1136.241130][T15755] usb 2-1: config 0 descriptor?? [ 1136.280663][T15741] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1136.285805][T15755] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1136.305497][T15741] gspca_stk1135: reg_w 0x2 err -71 [ 1136.316015][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.322776][T15741] gspca_stk1135: Sensor write failed [ 1136.328335][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.335671][T15741] gspca_stk1135: Sensor write failed [ 1136.341153][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.348050][T15741] gspca_stk1135: Sensor read failed [ 1136.353582][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.360188][T15741] gspca_stk1135: Sensor read failed [ 1136.366529][T15741] gspca_stk1135: Detected sensor type unknown (0x0) [ 1136.373776][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.380538][T15741] gspca_stk1135: Sensor read failed [ 1136.387426][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.394006][T15741] gspca_stk1135: Sensor read failed [ 1136.399565][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.406208][T15741] gspca_stk1135: Sensor write failed [ 1136.412025][T15741] gspca_stk1135: serial bus timeout: status=0x00 [ 1136.418612][T15741] gspca_stk1135: Sensor write failed [ 1136.424418][T15741] stk1135 6-1:0.57: probe with driver stk1135 failed with error -71 [ 1136.438753][T15741] usb 6-1: USB disconnect, device number 61 [ 1137.103936][T15755] gspca_zc3xx: reg_w_i err -71 [ 1137.702134][T15755] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1137.702239][T15755] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1137.719998][T15755] usb 2-1: USB disconnect, device number 89 [ 1138.051079][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2812'. [ 1138.074938][T15747] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1138.221023][T17256] No such timeout policy "syz1" [ 1138.283062][T15747] usb 7-1: Using ep0 maxpacket: 32 [ 1138.320423][T15747] usb 7-1: config 0 has an invalid interface number: 115 but max is 0 [ 1138.341304][T17261] netlink: 'syz.5.2812': attribute type 8 has an invalid length. [ 1138.361982][T15747] usb 7-1: config 0 has no interface number 0 [ 1138.382823][T10517] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1138.388949][T15747] usb 7-1: config 0 interface 115 altsetting 7 endpoint 0x82 has invalid maxpacket 14848, setting to 1024 [ 1138.420833][T15747] usb 7-1: config 0 interface 115 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1138.445609][T15747] usb 7-1: config 0 interface 115 has no altsetting 0 [ 1138.514321][T15747] usb 7-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=72.3e [ 1138.543990][T15747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.580160][T15747] usb 7-1: Product: syz [ 1138.593489][T15747] usb 7-1: Manufacturer: syz [ 1138.604706][T10517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.615085][T15747] usb 7-1: SerialNumber: syz [ 1138.639907][T15747] usb 7-1: config 0 descriptor?? [ 1138.651319][T10517] usb 2-1: config 0 has no interfaces? [ 1138.669558][T15747] option 7-1:0.115: GSM modem (1-port) converter detected [ 1138.684636][T10517] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1138.742182][T10517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.785984][T10517] usb 2-1: Product: syz [ 1138.810154][T10517] usb 2-1: Manufacturer: syz [ 1138.831379][T10517] usb 2-1: SerialNumber: syz [ 1138.857574][T10517] usb 2-1: config 0 descriptor?? [ 1139.126195][T10517] usb 2-1: USB disconnect, device number 90 [ 1139.401871][T15741] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1139.562528][T15741] usb 1-1: Using ep0 maxpacket: 32 [ 1139.572787][T15741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.594786][T15741] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.614059][T10517] usb 7-1: USB disconnect, device number 50 [ 1139.640080][T10517] option 7-1:0.115: device disconnected [ 1139.652339][T15741] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.709516][T15741] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1139.780008][T15741] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1139.816120][T15741] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1139.861251][T15741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.944616][T15741] usb 1-1: config 0 descriptor?? [ 1140.381005][T17265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.444453][T17265] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1140.500363][T15741] hid-thrustmaster 0003:044F:B65D.0012: unbalanced collection at end of report description [ 1140.567255][T15741] hid-thrustmaster 0003:044F:B65D.0012: parse failed with error -22 [ 1140.605097][T15741] hid-thrustmaster 0003:044F:B65D.0012: probe with driver hid-thrustmaster failed with error -22 [ 1140.660493][T17274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.670902][T17274] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.678256][T17274] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.685616][T17274] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.834078][T15747] usb 1-1: USB disconnect, device number 48 [ 1140.889789][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2821'. [ 1142.464375][ T30] audit: type=1804 audit(1779473114.470:407): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2835" name="/newroot/514/file0" dev="fuse" ino=1 res=1 errno=0 [ 1142.513941][T15747] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1142.574826][ T30] audit: type=1804 audit(1779473114.560:408): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2835" name="/newroot/514/file0" dev="fuse" ino=1 res=1 errno=0 [ 1142.696039][T15747] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1142.731248][T15747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.776598][T15747] usb 7-1: Product: syz [ 1142.786548][T15747] usb 7-1: Manufacturer: syz [ 1142.798236][T15747] usb 7-1: SerialNumber: syz [ 1143.251014][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1143.252180][T17328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.305701][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1144.865306][T15741] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1144.945727][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 1145.092200][T15741] usb 8-1: Using ep0 maxpacket: 32 [ 1145.143663][T15741] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1145.183821][T15741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.268945][T15741] usb 8-1: config 0 descriptor?? [ 1145.320671][T15741] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1145.425428][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 1145.466592][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1145.520869][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1145.570995][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1145.613679][ T9267] udevd[9267]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 1145.632344][T15747] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1145.688112][T15747] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1145.696856][T15755] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1145.745282][T15747] usb 7-1: USB disconnect, device number 51 [ 1145.861934][T15755] usb 2-1: Using ep0 maxpacket: 32 [ 1145.882647][T15755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.954238][T15755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.019103][T15755] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1146.066337][T15755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.114287][T15741] gspca_vc032x: reg_w err -71 [ 1146.124804][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.133752][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.139719][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.146429][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.155270][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.160606][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.166813][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.172495][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.177917][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.183724][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.189204][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.193334][T15755] usb 2-1: config 0 descriptor?? [ 1146.195249][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.239306][T15755] hub 2-1:0.0: USB hub found [ 1146.254412][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.293157][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.317012][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.341549][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.385380][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.436961][T15741] gspca_vc032x: I2c Bus Busy Wait 00 [ 1146.472861][T15755] hub 2-1:0.0: 1 port detected [ 1146.479467][T15741] gspca_vc032x: Unknown sensor... [ 1146.504297][T15741] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 1146.558963][T15741] usb 8-1: USB disconnect, device number 5 [ 1146.582854][T16999] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 1147.099941][T15755] hub 2-1:0.0: activate --> -90 [ 1147.125830][ T30] audit: type=1800 audit(1779473119.120:409): pid=17405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2869" name="bus" dev="tmpfs" ino=2663 res=0 errno=0 [ 1147.156902][T15741] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1147.200332][T17402] syzkaller0: entered promiscuous mode [ 1147.206911][T17402] syzkaller0: entered allmulticast mode [ 1147.382369][T15741] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 1147.437680][T15741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1147.457719][T15741] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1147.468332][T15741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.476998][T15741] usb 6-1: Product: syz [ 1147.481405][T15741] usb 6-1: Manufacturer: syz [ 1147.496219][T15741] usb 6-1: SerialNumber: syz [ 1147.527856][T15747] usb 2-1: USB disconnect, device number 91 [ 1147.529092][T15741] usb 6-1: config 0 descriptor?? [ 1147.556435][T17386] [ 1147.558787][T17386] ============================================ [ 1147.564915][T17386] WARNING: possible recursive locking detected [ 1147.571048][T17386] syzkaller #0 Tainted: G L [ 1147.577002][T17386] -------------------------------------------- [ 1147.583130][T17386] syz.3.2863/17386 is trying to acquire lock: [ 1147.589421][T17386] ffffffff8f3d2450 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1147.599813][T17386] [ 1147.599813][T17386] but task is already holding lock: [ 1147.607366][T17386] ffffffff8f3d2450 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1147.618134][T17386] [ 1147.618134][T17386] other info that might help us debug this: [ 1147.626326][T17386] Possible unsafe locking scenario: [ 1147.626326][T17386] [ 1147.633787][T17386] CPU0 [ 1147.637097][T17386] ---- [ 1147.640364][T17386] lock(qp_broker_list.mutex); [ 1147.645291][T17386] lock(qp_broker_list.mutex); [ 1147.650163][T17386] [ 1147.650163][T17386] *** DEADLOCK *** [ 1147.650163][T17386] [ 1147.658497][T17386] May be due to missing lock nesting notation [ 1147.658497][T17386] [ 1147.667008][T17386] 1 lock held by syz.3.2863/17386: [ 1147.672259][T17386] #0: ffffffff8f3d2450 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1147.683200][T17386] [ 1147.683200][T17386] stack backtrace: [ 1147.689184][T17386] CPU: 0 UID: 0 PID: 17386 Comm: syz.3.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.689221][T17386] Tainted: [L]=SOFTLOCKUP [ 1147.689230][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1147.689244][T17386] Call Trace: [ 1147.689256][T17386] [ 1147.689267][T17386] dump_stack_lvl+0xe8/0x150 [ 1147.689299][T17386] print_deadlock_bug+0x279/0x290 [ 1147.689331][T17386] __lock_acquire+0x253f/0x2cf0 [ 1147.689359][T17386] ? is_bpf_text_address+0x292/0x2b0 [ 1147.689383][T17386] ? is_bpf_text_address+0x26/0x2b0 [ 1147.689407][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.689434][T17386] ? kernel_text_address+0xa5/0xe0 [ 1147.689468][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.689494][T17386] ? __kernel_text_address+0xd/0x30 [ 1147.689530][T17386] ? vmci_qp_broker_detach+0x117/0xf20 [ 1147.689556][T17386] lock_acquire+0x106/0x350 [ 1147.689580][T17386] ? vmci_qp_broker_detach+0x117/0xf20 [ 1147.689608][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.689639][T17386] __mutex_lock+0x1a3/0x1550 [ 1147.689661][T17386] ? vmci_qp_broker_detach+0x117/0xf20 [ 1147.689689][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.689716][T17386] ? kasan_save_track+0x4f/0x80 [ 1147.689746][T17386] ? kasan_save_track+0x3e/0x80 [ 1147.689775][T17386] ? kasan_save_free_info+0x46/0x50 [ 1147.689801][T17386] ? __kasan_slab_free+0x5c/0x80 [ 1147.689832][T17386] ? kfree+0x1c5/0x640 [ 1147.689859][T17386] ? vmci_ctx_put+0x5ef/0xc40 [ 1147.689888][T17386] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1147.689920][T17386] ? vmci_datagram_dispatch+0x450/0xc60 [ 1147.689953][T17386] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1147.689978][T17386] ? vmci_host_close+0x98/0x160 [ 1147.690001][T17386] ? vmci_qp_broker_detach+0x117/0xf20 [ 1147.690026][T17386] ? exit_to_user_mode_loop+0xf3/0x4d0 [ 1147.690049][T17386] ? __pfx___mutex_lock+0x10/0x10 [ 1147.690081][T17386] vmci_qp_broker_detach+0x117/0xf20 [ 1147.690114][T17386] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1147.690139][T17386] ? kasan_quarantine_put+0xbb/0x1f0 [ 1147.690168][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690203][T17386] ? lockdep_hardirqs_on+0x7a/0x110 [ 1147.690238][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690266][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690292][T17386] ? kfree+0x1c5/0x640 [ 1147.690318][T17386] ? vmci_ctx_put+0x5ef/0xc40 [ 1147.690347][T17386] ? vmci_ctx_put+0x141/0xc40 [ 1147.690377][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690405][T17386] vmci_ctx_put+0x64e/0xc40 [ 1147.690436][T17386] ? __pfx___schedule+0x10/0x10 [ 1147.690467][T17386] ? vmci_ctx_put+0x141/0xc40 [ 1147.690498][T17386] ? vmci_ctx_enqueue_datagram+0x3a3/0x420 [ 1147.690531][T17386] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1147.690563][T17386] ? preempt_schedule_thunk+0x16/0x30 [ 1147.690595][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690621][T17386] ? preempt_schedule_common+0x82/0xd0 [ 1147.690653][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690689][T17386] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1147.690725][T17386] vmci_datagram_dispatch+0x450/0xc60 [ 1147.690763][T17386] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1147.690797][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690827][T17386] vmci_qp_broker_detach+0x8dd/0xf20 [ 1147.690859][T17386] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1147.690884][T17386] ? kasan_quarantine_put+0xbb/0x1f0 [ 1147.690916][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.690945][T17386] ? kfree+0x1c5/0x640 [ 1147.690971][T17386] ? vmci_ctx_put+0x5ef/0xc40 [ 1147.690999][T17386] ? vmci_ctx_put+0x141/0xc40 [ 1147.691029][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.691057][T17386] vmci_ctx_put+0x64e/0xc40 [ 1147.691088][T17386] ? vmci_ctx_put+0x141/0xc40 [ 1147.691120][T17386] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1147.691150][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.691177][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.691321][T17386] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1147.691352][T17386] vmci_host_close+0x98/0x160 [ 1147.691380][T17386] ? __pfx_vmci_host_close+0x10/0x10 [ 1147.691405][T17386] __fput+0x44f/0xa60 [ 1147.691439][T17386] task_work_run+0x1d9/0x270 [ 1147.691474][T17386] ? __pfx_task_work_run+0x10/0x10 [ 1147.691511][T17386] exit_to_user_mode_loop+0xf3/0x4d0 [ 1147.691535][T17386] ? rcu_is_watching+0x15/0xb0 [ 1147.691562][T17386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.691585][T17386] do_syscall_64+0x33e/0xf80 [ 1147.691624][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.691647][T17386] RIP: 0033:0x7f2b1499ce59 [ 1147.691668][T17386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.691687][T17386] RSP: 002b:00007ffd36dcba08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1147.691711][T17386] RAX: 0000000000000000 RBX: 00007f2b14c17da0 RCX: 00007f2b1499ce59 [ 1147.691727][T17386] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1147.691741][T17386] RBP: 00007f2b14c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1147.691755][T17386] R10: 00007f2b14c17cb0 R11: 0000000000000246 R12: 0000000000118257 [ 1147.691771][T17386] R13: 00007f2b14c15fac R14: 0000000000117f95 R15: 00007ffd36dcbb10 [ 1147.691797][T17386] [ 1148.467117][T14714] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1148.654878][T14714] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1148.664241][T14714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.672508][T14714] usb 8-1: Product: syz [ 1148.676704][T14714] usb 8-1: Manufacturer: syz [ 1148.681332][T14714] usb 8-1: SerialNumber: syz [ 1148.683054][T15747] usb 6-1: USB disconnect, device number 62 [ 1149.100608][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1149.113086][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1150.934351][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1150.947238][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1150.959774][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1150.972051][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1150.981564][T14714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1150.991420][T14714] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1151.003348][T14714] usb 8-1: USB disconnect, device number 6