last executing test programs: 26.387188271s ago: executing program 2 (id=1129): socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) 19.94815617s ago: executing program 2 (id=1137): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r6 = syz_open_pts(r5, 0x2000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x3) r7 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x295c3e750d7bf054) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0) 17.984124632s ago: executing program 2 (id=1138): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 15.564262785s ago: executing program 1 (id=1142): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.348245831s ago: executing program 0 (id=1145): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.257276102s ago: executing program 1 (id=1146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r0, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r4, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.987811082s ago: executing program 3 (id=1147): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 11.851934105s ago: executing program 1 (id=1149): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r0, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r4, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.823256365s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff01000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 10.623374971s ago: executing program 0 (id=1151): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a46100"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.074307903s ago: executing program 3 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x0) 9.477160956s ago: executing program 2 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0x6, 0x0, &(0x7f0000000300)="882f1242a03c", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c3c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001c380)={&(0x7f000001aa40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x34bc9843cb54b4c2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130a0142000000000000000007000001"], 0x14}}, 0x800) 9.401619667s ago: executing program 4 (id=1154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) 9.374083948s ago: executing program 1 (id=1155): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 8.435993698s ago: executing program 4 (id=1156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.435711418s ago: executing program 3 (id=1157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r0, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r4, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.46430115s ago: executing program 0 (id=1158): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 6.462793661s ago: executing program 4 (id=1159): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff0100000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 6.445269431s ago: executing program 3 (id=1160): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39a", 0xaf}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.431777121s ago: executing program 1 (id=1161): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 4.326309036s ago: executing program 0 (id=1162): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.146830492s ago: executing program 4 (id=1163): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 3.063272384s ago: executing program 1 (id=1164): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 3.034236224s ago: executing program 0 (id=1165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000003000/0x2000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0xe4ffffff}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x2000004, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xf}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x80000001, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe5fc, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x8, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x31d, &(0x7f00000000c0)={0x0, 0x1073, 0x8, 0x2, 0x152}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000200)={0x4, 0x8c9, 0x4}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') 3.022301885s ago: executing program 3 (id=1166): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82ba", 0x2d, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.38669904s ago: executing program 4 (id=1167): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x768, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) 1.078157557s ago: executing program 0 (id=1168): mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 307.739713ms ago: executing program 4 (id=1169): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a46100"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 210.215595ms ago: executing program 2 (id=1170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 3 (id=1171): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) mknod$loop(0x0, 0xfff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r5, 0x0, 0xee01, 0x2, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x9}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): T126] usb 4-1: Manufacturer: syz [ 292.382877][ T126] usb 4-1: SerialNumber: syz [ 292.429868][ T6203] loop1: detected capacity change from 0 to 65536 [ 292.446781][ T6203] (syz.1.453,6203,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 292.459340][ T6203] (syz.1.453,6203,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 292.616218][ T126] usbhid 4-1:8.37: couldn't find an input interrupt endpoint [ 292.674815][ T126] usb 4-1: USB disconnect, device number 21 [ 292.724762][ T5699] usb 5-1: USB disconnect, device number 20 [ 293.961096][ T14] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 294.223155][ T14] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 294.277278][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.382691][ T14] usb 3-1: Product: syz [ 294.443593][ T14] usb 3-1: Manufacturer: syz [ 294.507726][ T14] usb 3-1: SerialNumber: syz [ 294.529266][ T14] usb 3-1: config 0 descriptor?? [ 296.127994][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 296.300421][ T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 296.374901][ T6279] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 296.397868][ T6279] bond0: (slave netdevsim0): Releasing backup interface [ 296.409506][ T6279] team0: Port device netdevsim0 added [ 296.420440][ T5289] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 296.453641][ T6280] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 296.469362][ T4322] usb 3-1: USB disconnect, device number 19 [ 296.481444][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 296.490558][ T14] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 296.503960][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.523956][ T126] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 296.551965][ T126] usb 1-1: config 4 has no interface number 0 [ 296.574294][ T126] usb 1-1: config 4 interface 127 has no altsetting 0 [ 296.600009][ T126] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 296.610024][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.618301][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 296.623908][ T126] usb 1-1: Product: syz [ 296.628716][ T126] usb 1-1: Manufacturer: syz [ 296.634221][ T126] usb 1-1: SerialNumber: syz [ 296.641094][ T5289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.659431][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.679187][ T5289] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.723521][ T5289] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 296.731114][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 296.753493][ T14] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.760910][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.778014][ T14] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.798216][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.806908][ T6280] team0: Port device netdevsim0 removed [ 296.807361][ T14] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 296.821927][ T5289] usb 2-1: Product: syz [ 296.830721][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.833001][ T5289] usb 2-1: Manufacturer: syz [ 296.846658][ T5289] usb 2-1: SerialNumber: syz [ 296.853817][ T14] usb 5-1: config 0 descriptor?? [ 297.049785][ T6280] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.095633][ T5289] usb 2-1: config 0 descriptor?? [ 297.163293][ T6286] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.852883][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 297.860037][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 297.879174][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 297.937186][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 297.988844][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.030527][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.037674][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.051101][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.068505][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.094856][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.104639][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.117259][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.126041][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.138157][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.148479][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.162669][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.169751][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.180297][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.192059][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.199108][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.206753][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.230402][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.237574][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.245597][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.264580][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.276036][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.291317][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.298388][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.309788][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.318131][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.326960][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.334247][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.345189][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.354472][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.365780][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.374147][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.396720][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.416057][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.423186][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.437501][ T14] elecom 0003:056E:00FF.0003: unknown main item tag 0x0 [ 298.448134][ T14] elecom 0003:056E:00FF.0003: hidraw0: USB HID v0.03 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 298.477255][ T4319] usb 2-1: USB disconnect, device number 26 [ 298.518013][ T14] usb 5-1: USB disconnect, device number 21 [ 298.566923][ T6296] loop4: detected capacity change from 0 to 1024 [ 299.709907][ T126] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 299.895519][ T126] usb 1-1: USB disconnect, device number 14 [ 299.989741][ T6297] fido_id[6297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 301.752208][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 302.240783][ T6337] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 302.380593][ T5733] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 302.470579][ T126] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 302.911177][ T5733] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 303.050430][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 303.388700][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.398006][ T5733] usb 3-1: Product: syz [ 303.404131][ T5733] usb 3-1: Manufacturer: syz [ 303.409714][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.418460][ T5733] usb 3-1: SerialNumber: syz [ 303.433955][ T126] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 303.461798][ T126] usb 1-1: config 4 has no interface number 0 [ 303.482987][ T126] usb 1-1: config 4 interface 127 has no altsetting 0 [ 303.515932][ T126] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 303.541044][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.567655][ T126] usb 1-1: Product: syz [ 303.578864][ T126] usb 1-1: Manufacturer: syz [ 303.620710][ T126] usb 1-1: SerialNumber: syz [ 304.506812][ T6357] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.807520][ T5733] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 305.877777][ T5733] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 305.891211][ T5733] usb 3-1: unit 2 not found! [ 305.899311][ T5733] usb 3-1: unit 64 not found! [ 306.752907][ T5733] usb 3-1: USB disconnect, device number 20 [ 306.933178][ T126] usbhid 1-1:4.127: couldn't find an input interrupt endpoint [ 306.962049][ T126] usb 1-1: USB disconnect, device number 15 [ 307.156906][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.600565][ T4274] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 308.843501][ T4274] usb 4-1: Using ep0 maxpacket: 16 [ 309.255635][ T4274] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.127654][ T4274] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.139657][ T4274] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.159778][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.169241][ T4274] usb 4-1: Product: syz [ 310.173858][ T4274] usb 4-1: Manufacturer: syz [ 310.178521][ T4274] usb 4-1: SerialNumber: syz [ 310.394034][ T4274] usb 4-1: 0:2 : does not exist [ 310.408486][ T4274] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 310.431362][ T4274] usb 4-1: USB disconnect, device number 22 [ 310.570539][ T5733] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 310.678780][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.684169][ T5699] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 310.799592][ T5733] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 310.809665][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.818232][ T5733] usb 5-1: Product: syz [ 310.823388][ T5733] usb 5-1: Manufacturer: syz [ 310.828354][ T5733] usb 5-1: SerialNumber: syz [ 311.271131][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 311.317346][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.516087][ T5699] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 311.612381][ T5699] usb 3-1: config 4 has no interface number 0 [ 311.666950][ T5699] usb 3-1: config 4 interface 127 has no altsetting 0 [ 311.749064][ T5699] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 311.816110][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.920416][ T5699] usb 3-1: Product: syz [ 311.981359][ T5699] usb 3-1: Manufacturer: syz [ 312.041810][ T5699] usb 3-1: SerialNumber: syz [ 312.369892][ T4338] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 312.404491][ T4338] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.812886][ T6418] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.163828][ T4317] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 313.826680][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 314.060576][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 314.562023][ T4317] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 314.580474][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.588767][ T4317] usb 4-1: Product: syz [ 314.609996][ T4317] usb 4-1: Manufacturer: syz [ 314.626320][ T4317] usb 4-1: SerialNumber: syz [ 314.648663][ T4317] usb 4-1: config 0 descriptor?? [ 314.675425][ T4317] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 314.735322][ T5699] usbhid 3-1:4.127: couldn't find an input interrupt endpoint [ 314.862233][ T5733] usb 5-1: 1:1 : no UAC_FORMAT_TYPE desc [ 314.942828][ T5699] usb 3-1: USB disconnect, device number 21 [ 314.969951][ T5733] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 315.060656][ T5733] usb 5-1: unit 2 not found! [ 315.065422][ T5733] usb 5-1: unit 64 not found! [ 315.169480][ T5733] usb 5-1: USB disconnect, device number 22 [ 315.261045][ T6429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.517'. [ 315.564025][ T6430] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 315.672745][ T6430] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 316.042529][ T4317] ssu100: probe of 4-1:0.0 failed with error -110 [ 316.209973][ T6437] binder: BINDER_SET_CONTEXT_MGR already set [ 316.216578][ T6437] binder: 6433:6437 ioctl 4018620d 200000004a80 returned -16 [ 316.528791][ T6430] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 317.776028][ T4322] usb 4-1: USB disconnect, device number 23 [ 318.711983][ T6463] loop3: detected capacity change from 0 to 256 [ 318.740751][ T4322] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 318.787181][ T6464] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 318.820640][ T4317] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 318.938413][ T6464] bond0: (slave netdevsim0): Releasing backup interface [ 318.950559][ T4322] usb 2-1: Using ep0 maxpacket: 16 [ 318.962904][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.006563][ T6464] team0: Port device netdevsim0 added [ 319.013478][ T4322] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 319.024649][ T6467] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 319.036565][ T4317] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 319.055720][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.065076][ T4322] usb 2-1: config 4 has no interface number 0 [ 319.083079][ T4322] usb 2-1: config 4 interface 127 has no altsetting 0 [ 319.090936][ T4317] usb 1-1: Product: syz [ 319.095350][ T4317] usb 1-1: Manufacturer: syz [ 319.100254][ T4317] usb 1-1: SerialNumber: syz [ 319.108025][ T4322] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 319.166107][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.176237][ T4322] usb 2-1: Product: syz [ 319.181230][ T4322] usb 2-1: Manufacturer: syz [ 319.186106][ T4322] usb 2-1: SerialNumber: syz [ 319.266713][ T6475] loop4: detected capacity change from 0 to 1024 [ 319.281777][ T6467] team0: Port device netdevsim0 removed [ 319.307044][ T6475] EXT4-fs: Ignoring removed bh option [ 319.314277][ T6467] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 319.356591][ T6475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 320.187610][ T6483] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.503922][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 321.521872][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 321.614269][ T4322] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 321.642696][ T6475] EXT4-fs (loop4): unmounting filesystem. [ 321.661777][ T4322] usb 2-1: USB disconnect, device number 27 [ 322.270515][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 322.270957][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 322.516477][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.522957][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.915470][ T4317] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 323.060824][ T4317] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 323.294511][ T4317] usb 1-1: unit 2 not found! [ 323.299370][ T4317] usb 1-1: unit 64 not found! [ 323.343667][ T4317] usb 1-1: USB disconnect, device number 16 [ 323.720274][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.634521][ T6515] loop2: detected capacity change from 0 to 256 [ 324.695118][ T6515] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 325.282414][ T6536] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 325.301363][ T6536] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 325.930721][ T5733] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 326.000751][ T4325] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 326.145165][ T5733] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 326.162062][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.170390][ T5733] usb 2-1: Product: syz [ 326.174711][ T5733] usb 2-1: Manufacturer: syz [ 326.179458][ T5733] usb 2-1: SerialNumber: syz [ 326.200440][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 326.211332][ T4325] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.275616][ T4325] usb 1-1: config 179 has no interface number 0 [ 326.308940][ T4325] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 326.353835][ T4325] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 326.830481][ T4325] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.860954][ T4325] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 326.880910][ T4325] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.912396][ T4325] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 327.249552][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.575237][ T6540] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 327.586294][ T4386] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 327.654915][ T4386] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.039291][ T4317] usb 1-1: USB disconnect, device number 17 [ 328.039325][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 328.056162][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 328.831326][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.831430][ T4286] Bluetooth: hci5: command 0x1003 tx timeout [ 329.273196][ T5733] usb 2-1: 1:1 : unsupported format bits 0x2004 [ 329.279633][ T5733] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 329.402969][ T5733] usb 2-1: failed to enable PITCH for EP 0x1 [ 329.500523][ T5733] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 329.507667][ T5733] usb 2-1: unit 2 not found! [ 329.521213][ T5733] usb 2-1: unit 64 not found! [ 329.565550][ T5733] usb 2-1: USB disconnect, device number 28 [ 329.821180][ T4537] udevd[4537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.986901][ T6572] loop1: detected capacity change from 0 to 256 [ 330.059658][ T6572] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 332.600523][ T4322] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 332.665310][ T6589] syz.0.561 (6589): drop_caches: 2 [ 332.810601][ T4322] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 332.825690][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.910431][ T4322] usb 3-1: Product: syz [ 332.925590][ T4322] usb 3-1: Manufacturer: syz [ 332.956025][ T4322] usb 3-1: SerialNumber: syz [ 333.069298][ T6610] loop1: detected capacity change from 0 to 256 [ 335.128527][ T4386] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 335.149306][ T6610] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 335.261934][ T4386] Bluetooth: hci5: Frame reassembly failed (-84) [ 336.156608][ T6631] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 336.193276][ T26] audit: type=1326 audit(1782773326.856:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.217167][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.267595][ T6631] bond0: (slave netdevsim0): Releasing backup interface [ 336.319078][ T6631] team0: Port device netdevsim0 added [ 336.339789][ T26] audit: type=1326 audit(1782773326.856:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.364999][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.402633][ T6642] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 336.440538][ T4678] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 336.468499][ T26] audit: type=1326 audit(1782773326.896:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.629610][ T26] audit: type=1326 audit(1782773326.896:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.640945][ T4678] usb 2-1: Using ep0 maxpacket: 8 [ 336.659952][ T6642] team0: Port device netdevsim0 removed [ 336.688734][ T4678] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 336.770797][ T4678] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 336.778320][ T26] audit: type=1326 audit(1782773326.896:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.852969][ T6642] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 336.866268][ T26] audit: type=1326 audit(1782773326.896:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 336.870821][ T4678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.915709][ T26] audit: type=1326 audit(1782773326.896:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 337.025534][ T26] audit: type=1326 audit(1782773326.896:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 337.040669][ T4678] usb 2-1: Product: syz [ 337.103425][ T4678] usb 2-1: Manufacturer: syz [ 337.110671][ T4678] usb 2-1: SerialNumber: syz [ 337.139734][ T4678] usb 2-1: config 0 descriptor?? [ 337.150784][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 337.158574][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 337.174816][ T4678] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 337.185068][ T26] audit: type=1326 audit(1782773326.896:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.3.576" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 337.237611][ T4322] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 337.250537][ T4322] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 337.262970][ T4322] usb 3-1: failed to enable PITCH for EP 0x1 [ 337.269805][ T4322] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 337.280677][ T4322] usb 3-1: unit 2 not found! [ 337.285498][ T4322] usb 3-1: unit 64 not found! [ 337.890721][ T4678] gspca_zc3xx: reg_w_i err -110 [ 338.233413][ T4322] usb 3-1: USB disconnect, device number 22 [ 338.481820][ T4587] udevd[4587]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.760542][ T4678] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 338.766975][ T4678] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 340.000902][ T4678] usb 2-1: USB disconnect, device number 29 [ 341.670592][ T4325] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 341.875745][ T4325] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 341.892368][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.695602][ T4325] usb 4-1: Product: syz [ 342.699871][ T4325] usb 4-1: Manufacturer: syz [ 342.716341][ T4325] usb 4-1: SerialNumber: syz [ 343.496768][ T4545] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 345.470418][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 345.470473][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 346.620958][ T4325] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 346.627593][ T4325] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 346.747707][ T4325] usb 4-1: failed to enable PITCH for EP 0x1 [ 346.785308][ T4325] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 346.809278][ T4325] usb 4-1: unit 2 not found! [ 346.839562][ T4325] usb 4-1: unit 64 not found! [ 346.917127][ T6732] loop1: detected capacity change from 0 to 64 [ 347.073232][ T4325] usb 4-1: USB disconnect, device number 24 [ 348.790543][ T41] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 349.006181][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 349.015224][ T41] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 349.055054][ T41] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 349.073918][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.085056][ T41] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 349.098400][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.124808][ T41] usb 5-1: config 0 descriptor?? [ 349.150490][ T4323] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 349.290422][ T4325] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 349.342164][ T4323] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 349.379913][ T4323] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.393838][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.402156][ T4323] usb 3-1: SerialNumber: syz [ 349.500397][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 349.508099][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.519202][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.543379][ T4325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.552844][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.561447][ T4325] usb 1-1: Product: syz [ 349.566050][ T4325] usb 1-1: Manufacturer: syz [ 349.571110][ T4325] usb 1-1: SerialNumber: syz [ 349.591444][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.598573][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.621817][ T4323] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 349.622883][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.641313][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.652916][ T6753] loop3: detected capacity change from 0 to 256 [ 349.659585][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.670030][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.678070][ T6753] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 349.694195][ T4323] usb 3-1: USB disconnect, device number 23 [ 349.697270][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.710050][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.720805][ T6753] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 349.738290][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.745889][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.761731][ T6753] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 349.777356][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.785564][ T6753] UDF-fs: Scanning with blocksize 512 failed [ 349.792167][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.800193][ T4325] usb 1-1: 0:2 : does not exist [ 349.808685][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.828835][ T6753] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 349.838813][ T4325] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 349.859915][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.868696][ T4325] usb 1-1: USB disconnect, device number 18 [ 349.887795][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.909597][ T6753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.928949][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.957278][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 349.986009][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.008418][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.025754][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.049357][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.067926][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.076851][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.089831][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.096988][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.113666][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.125712][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.133567][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.141306][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.207513][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.225076][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.232265][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.249337][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.266935][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 350.291289][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.097446][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.104562][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.111700][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.118499][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.126605][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.133775][ T41] elo 0003:04E7:0030.0004: unknown main item tag 0x0 [ 351.147869][ T41] elo 0003:04E7:0030.0004: hidraw0: USB HID v0.81 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 351.164246][ T41] usb 5-1: USB disconnect, device number 23 [ 351.341960][ T6779] fido_id[6779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 351.410650][ T126] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 351.614804][ T126] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 351.653087][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.677383][ T126] usb 2-1: Product: syz [ 351.695346][ T126] usb 2-1: Manufacturer: syz [ 351.725578][ T126] usb 2-1: SerialNumber: syz [ 352.172370][ T6792] binder_alloc: 6789: binder_alloc_buf, no vma [ 353.853861][ T4416] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 353.879191][ T4416] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.470534][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 355.471093][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 355.496720][ T126] usb 2-1: 1:1 : unsupported format bits 0x2004 [ 355.581876][ T126] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 355.765005][ T6812] IPv6: sit1: Disabled Multicast RS [ 355.841210][ T126] usb 2-1: failed to enable PITCH for EP 0x1 [ 355.852335][ T126] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 355.865863][ T126] usb 2-1: unit 2 not found! [ 355.883163][ T126] usb 2-1: unit 64 not found! [ 357.392058][ T6811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 357.425479][ T126] usb 2-1: USB disconnect, device number 30 [ 357.484654][ T6811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.534409][ T6811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.542259][ T6811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.548417][ T6811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 357.950528][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 359.550420][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 359.556638][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 359.556687][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 359.556740][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.280654][ T41] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 361.611351][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.660888][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.673559][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.683728][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.717775][ T6841] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.727358][ T6841] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.736408][ T6841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.745583][ T6841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.775859][ T6841] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 361.802084][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.815926][ T41] usb 1-1: no configurations [ 361.821628][ T41] usb 1-1: can't read configurations, error -22 [ 362.100615][ T4322] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 362.265307][ T6862] IPv6: sit1: Disabled Multicast RS [ 362.333052][ T4322] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 364.350487][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.357326][ T6861] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 365.371466][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.486814][ T4322] usb 4-1: Product: syz [ 365.541179][ T4322] usb 4-1: Manufacturer: syz [ 365.613236][ T4322] usb 4-1: SerialNumber: syz [ 365.824221][ T6861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.847946][ T4322] usb 4-1: can't set config #1, error -71 [ 365.911789][ T4322] usb 4-1: USB disconnect, device number 25 [ 366.583401][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.597420][ T6882] siw: device registration error -23 [ 366.800682][ T26] audit: type=1326 audit(1782773356.896:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 366.984172][ T6861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.997334][ T26] audit: type=1326 audit(1782773356.896:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 367.858222][ T6861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.860825][ T26] audit: type=1326 audit(1782773356.896:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 367.891287][ T26] audit: type=1326 audit(1782773356.896:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 367.915804][ T26] audit: type=1326 audit(1782773356.896:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 367.917161][ T6861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.993248][ T26] audit: type=1326 audit(1782773356.906:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 368.146599][ T6874] loop2: detected capacity change from 0 to 8192 [ 368.250362][ T26] audit: type=1326 audit(1782773356.906:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 368.277304][ T26] audit: type=1326 audit(1782773356.906:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 368.328001][ T26] audit: type=1326 audit(1782773356.906:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 368.352631][ T26] audit: type=1326 audit(1782773356.906:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7503b5d68e code=0x7ffc0000 [ 368.377664][ T6874] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 368.411112][ T6874] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 368.774833][ T6874] REISERFS (device loop2): using ordered data mode [ 368.782503][ T6874] reiserfs: using flush barriers [ 368.848454][ T6874] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 368.871842][ T6874] REISERFS (device loop2): checking transaction log (loop2) [ 368.967131][ T6874] REISERFS (device loop2): Using r5 hash to sort names [ 368.990660][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.032490][ T6874] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 369.097110][ T6874] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 369.494771][ T6912] loop3: detected capacity change from 0 to 256 [ 369.508367][ T6912] FAT-fs (loop3): unable to read block(17179869180) for building NFS inode [ 370.522547][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.529950][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.770690][ T14] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 372.009949][ T14] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 372.128100][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.200710][ T14] usb 4-1: Product: syz [ 372.204958][ T14] usb 4-1: Manufacturer: syz [ 372.209598][ T14] usb 4-1: SerialNumber: syz [ 373.456017][ T4545] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 374.029867][ T4545] Bluetooth: hci5: Frame reassembly failed (-84) [ 374.544651][ T6943] IPv6: sit1: Disabled Multicast RS [ 375.556314][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.002570][ T6942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.037725][ T6942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.049045][ T6942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.142764][ T6942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.153897][ T6942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 376.676866][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.253251][ T14] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 377.376876][ T14] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 377.657165][ T14] usb 4-1: failed to enable PITCH for EP 0x1 [ 377.683549][ T14] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 377.717048][ T14] usb 4-1: unit 2 not found! [ 377.760525][ T14] usb 4-1: unit 64 not found! [ 378.089792][ T14] usb 4-1: USB disconnect, device number 26 [ 378.110519][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.110564][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.190655][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.190699][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.565001][ T6962] loop1: detected capacity change from 0 to 256 [ 378.624404][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.021013][ T6870] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 379.800430][ T5696] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 379.960467][ T6870] usb 5-1: Using ep0 maxpacket: 16 [ 379.972091][ T6870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 380.010247][ T6870] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 380.020499][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 380.030980][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.041288][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 380.050592][ T6870] usb 5-1: config 4 has no interface number 0 [ 380.057580][ T6870] usb 5-1: config 4 interface 127 has no altsetting 0 [ 380.080526][ T5696] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 380.097207][ T5696] usb 4-1: config 4 has no interface number 0 [ 380.106730][ T5696] usb 4-1: config 4 interface 127 has no altsetting 0 [ 380.107658][ T6870] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 380.138686][ T5696] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 380.145725][ T6870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.157029][ T6870] usb 5-1: Product: syz [ 380.162155][ T6870] usb 5-1: Manufacturer: syz [ 380.167035][ T6870] usb 5-1: SerialNumber: syz [ 380.178129][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.187916][ T5696] usb 4-1: Product: syz [ 380.209711][ T5696] usb 4-1: Manufacturer: syz [ 380.220444][ T4320] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 380.235138][ T5696] usb 4-1: SerialNumber: syz [ 380.380481][ T4322] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 380.532099][ T4325] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 380.985630][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 381.019070][ T6982] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.051395][ T4320] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 381.069283][ T4320] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 381.094097][ T4320] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 381.104194][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.112512][ T4320] usb 1-1: Product: syz [ 381.117272][ T4320] usb 1-1: Manufacturer: syz [ 381.139146][ T4320] usb 1-1: SerialNumber: syz [ 381.187987][ T6976] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 381.220563][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 381.545026][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.557934][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.574682][ T4325] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 381.576019][ T4322] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.600182][ T4320] usb 1-1: MIDIStreaming interface descriptor not found [ 381.622498][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.646004][ T4322] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 381.663495][ T4325] usb 3-1: Product: syz [ 381.672278][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.681237][ T4325] usb 3-1: Manufacturer: syz [ 381.685942][ T4325] usb 3-1: SerialNumber: syz [ 381.694680][ T4320] usb 1-1: USB disconnect, device number 21 [ 381.706060][ T4322] usb 2-1: Product: syz [ 381.711221][ T4322] usb 2-1: Manufacturer: syz [ 381.716409][ T4322] usb 2-1: SerialNumber: syz [ 381.754504][ T4322] usb 2-1: config 0 descriptor?? [ 381.816582][ T4325] usb 3-1: config 0 descriptor?? [ 381.852830][ T4325] ch341 3-1:0.0: ch341-uart converter detected [ 381.872779][ T6870] usbhid 5-1:4.127: couldn't find an input interrupt endpoint [ 381.889704][ T6870] usb 5-1: USB disconnect, device number 24 [ 381.966824][ T4322] usb 2-1: USB disconnect, device number 31 [ 382.063518][ T4671] udevd[4671]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.666581][ T5696] usbhid 4-1:4.127: couldn't find an input interrupt endpoint [ 382.834499][ T5696] usb 4-1: USB disconnect, device number 27 [ 383.062809][ T4325] ch341-uart ttyUSB0: failed to read break control: -71 [ 383.072526][ T6994] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 383.081907][ T6994] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 383.091856][ T6994] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 383.149852][ T4325] ch341-uart: probe of ttyUSB0 failed with error -71 [ 383.319305][ T4325] usb 3-1: USB disconnect, device number 24 [ 383.942764][ T4325] ch341 3-1:0.0: device disconnected [ 383.954296][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.966574][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.930398][ T6993] block device autoloading is deprecated and will be removed. [ 385.920545][ T7007] loop2: detected capacity change from 0 to 256 [ 387.381085][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 387.381188][ T26] audit: type=1326 audit(1782773377.406:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 387.540623][ T26] audit: type=1326 audit(1782773377.406:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 387.565342][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.790524][ T26] audit: type=1326 audit(1782773377.406:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 387.814518][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.246932][ T7027] loop2: detected capacity change from 0 to 32768 [ 388.745581][ T26] audit: type=1326 audit(1782773377.406:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 388.948066][ T26] audit: type=1326 audit(1782773377.406:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 388.988358][ T26] audit: type=1326 audit(1782773377.416:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 389.114017][ T26] audit: type=1326 audit(1782773377.416:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 390.196959][ T26] audit: type=1326 audit(1782773377.416:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 390.221687][ T26] audit: type=1326 audit(1782773377.416:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 390.246139][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.283354][ T26] audit: type=1326 audit(1782773377.416:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.0.684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a55d68e code=0x7ffc0000 [ 390.331102][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 390.370527][ T4317] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 390.419033][ T7045] loop4: detected capacity change from 0 to 764 [ 390.734445][ T4317] usb 2-1: Using ep0 maxpacket: 16 [ 390.791005][ T4317] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.809701][ T4317] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 390.818206][ T6870] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 390.888140][ T7048] Symlink component flag not implemented [ 390.894418][ T7048] Symlink component flag not implemented [ 390.901375][ T7048] Symlink component flag not implemented (129) [ 390.907646][ T7048] Symlink component flag not implemented (6) [ 391.455000][ T4317] usb 2-1: config 4 has no interface number 0 [ 391.462397][ T4317] usb 2-1: config 4 interface 127 has no altsetting 0 [ 391.478849][ T4317] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 391.488418][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.496641][ T4317] usb 2-1: Product: syz [ 391.501016][ T4317] usb 2-1: Manufacturer: syz [ 391.505948][ T4317] usb 2-1: SerialNumber: syz [ 391.651202][ T6870] usb 3-1: Using ep0 maxpacket: 8 [ 391.848308][ T6870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 392.304628][ T7056] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.047488][ T6870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.091586][ T6870] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.106254][ T6870] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 393.120226][ T6870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.367325][ T6870] usb 3-1: Product: syz [ 393.390982][ T6870] usb 3-1: Manufacturer: syz [ 393.399950][ T6870] usb 3-1: SerialNumber: syz [ 393.412457][ T6870] usb 3-1: config 0 descriptor?? [ 393.459409][ T6870] usb 3-1: can't set config #0, error -71 [ 393.490583][ T6870] usb 3-1: USB disconnect, device number 25 [ 393.682478][ T7060] loop2: detected capacity change from 0 to 4096 [ 394.586485][ T7068] loop3: detected capacity change from 0 to 256 [ 396.367981][ T4317] usbhid 2-1:4.127: couldn't find an input interrupt endpoint [ 396.481457][ T4317] usb 2-1: USB disconnect, device number 32 [ 397.268156][ T7074] ntfs3: loop2: failed to convert "0080" to cp775 [ 397.690395][ T4317] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 398.153449][ T7084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.176509][ T7084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.243797][ T7083] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 398.252497][ T7084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.258879][ T7084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.270760][ T7084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.204081][ T4317] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 399.233014][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.302333][ T4317] usb 1-1: Product: syz [ 399.306765][ T4317] usb 1-1: Manufacturer: syz [ 399.350500][ T4317] usb 1-1: SerialNumber: syz [ 399.395618][ T7083] bond0: (slave netdevsim0): Releasing backup interface [ 399.610704][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.200383][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.270522][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.276761][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.351158][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.385305][ T7096] loop4: detected capacity change from 0 to 256 [ 400.462491][ T7083] team0: Port device netdevsim0 added [ 400.635983][ T4317] usb 1-1: 1:1 : unsupported format bits 0x2004 [ 400.654054][ T4317] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 400.705771][ T4317] usb 1-1: failed to enable PITCH for EP 0x1 [ 400.714295][ T4317] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 400.721690][ T4317] usb 1-1: unit 2 not found! [ 400.726369][ T4317] usb 1-1: unit 64 not found! [ 400.739001][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 401.113211][ T7101] loop3: detected capacity change from 0 to 4096 [ 401.594510][ T4317] usb 1-1: USB disconnect, device number 22 [ 401.903710][ T7092] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 402.719382][ T4587] udevd[4587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.809425][ T7112] [U]  [ 402.910028][ T7092] team0: Port device netdevsim0 removed [ 402.959095][ T7092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 403.029183][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 403.050547][ T14] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 405.061105][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 405.215227][ T14] usb 5-1: device descriptor read/all, error -71 [ 405.250491][ T4325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 405.460385][ T4325] usb 4-1: Using ep0 maxpacket: 16 [ 405.478241][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.513051][ T4325] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 405.572403][ T4325] usb 4-1: config 4 has no interface number 0 [ 405.599454][ T4325] usb 4-1: config 4 interface 127 has no altsetting 0 [ 405.618806][ T4325] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 405.650417][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.695417][ T4325] usb 4-1: Product: syz [ 405.699676][ T4325] usb 4-1: Manufacturer: syz [ 405.931040][ T4325] usb 4-1: SerialNumber: syz [ 407.134331][ T7135] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.600409][ T14] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 409.048023][ T4325] usbhid 4-1:4.127: couldn't find an input interrupt endpoint [ 409.343459][ T4325] usb 4-1: USB disconnect, device number 28 [ 409.529354][ T14] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 409.550025][ T7149] loop1: detected capacity change from 0 to 4096 [ 409.557313][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.764216][ T14] usb 1-1: Product: syz [ 409.807389][ T14] usb 1-1: Manufacturer: syz [ 409.812139][ T14] usb 1-1: SerialNumber: syz [ 409.834786][ T7154] loop2: detected capacity change from 0 to 256 [ 409.997124][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 409.997236][ T26] audit: type=1326 audit(1782773400.586:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.161572][ T26] audit: type=1326 audit(1782773400.636:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.196476][ T26] audit: type=1326 audit(1782773400.636:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.329957][ T26] audit: type=1326 audit(1782773400.636:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.427497][ T7163] ntfs3: loop1: failed to convert "0080" to cp775 [ 411.443076][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 411.478411][ T26] audit: type=1326 audit(1782773400.636:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.579580][ T26] audit: type=1326 audit(1782773400.636:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.618995][ T7167] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.681894][ T7167] loop2: detected capacity change from 0 to 512 [ 411.700817][ T26] audit: type=1326 audit(1782773400.636:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.770360][ T4325] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 411.787034][ T26] audit: type=1326 audit(1782773400.636:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.817744][ T26] audit: type=1326 audit(1782773400.636:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8119ce59 code=0x7ffc0000 [ 411.842668][ T26] audit: type=1326 audit(1782773400.646:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f8115d68e code=0x7ffc0000 [ 411.867028][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.877710][ T7160] loop3: detected capacity change from 0 to 8192 [ 411.934315][ T7167] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.723: corrupted inode contents [ 411.949161][ T7160] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 411.971699][ T7160] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 411.981902][ T7160] REISERFS (device loop3): using ordered data mode [ 411.988539][ T7160] reiserfs: using flush barriers [ 412.010395][ T4325] usb 5-1: Using ep0 maxpacket: 8 [ 412.030924][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.031315][ T7167] EXT4-fs (loop2): Remounting filesystem read-only [ 412.050528][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.070344][ T4325] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.071182][ T7160] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 412.102297][ T4325] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 412.116207][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.135823][ T4325] usb 5-1: Product: syz [ 412.147568][ T4325] usb 5-1: Manufacturer: syz [ 412.152702][ T7167] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 412.172519][ T4325] usb 5-1: SerialNumber: syz [ 412.189148][ T7160] REISERFS (device loop3): checking transaction log (loop3) [ 412.197282][ T7167] EXT4-fs (loop2): Remounting filesystem read-only [ 412.227415][ T4325] usb 5-1: config 0 descriptor?? [ 412.236352][ T7167] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.723: corrupted inode contents [ 412.269341][ T7160] REISERFS (device loop3): Using r5 hash to sort names [ 412.315056][ T7167] EXT4-fs (loop2): Remounting filesystem read-only [ 412.323919][ T7160] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 412.338234][ T7167] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.723: mark_inode_dirty error [ 412.360988][ T7160] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 412.386012][ T14] usb 1-1: 1:1 : unsupported format bits 0x2004 [ 412.392829][ T7167] EXT4-fs (loop2): Remounting filesystem read-only [ 412.422887][ T14] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 412.433759][ T7167] EXT4-fs (loop2): 1 orphan inode deleted [ 412.440085][ T7167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 412.461200][ T14] usb 1-1: failed to enable PITCH for EP 0x1 [ 412.511356][ T14] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 412.521321][ T14] usb 1-1: unit 2 not found! [ 412.527374][ T4317] usb 5-1: USB disconnect, device number 27 [ 412.551062][ T14] usb 1-1: unit 64 not found! [ 412.608193][ T7160] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 412.674708][ T14] usb 1-1: USB disconnect, device number 23 [ 412.813641][ T7160] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 412.895505][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 412.917080][ T7160] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 412.993083][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.249964][ T7182] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 413.482634][ T7174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.489462][ T7174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.495695][ T7174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.501837][ T7174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.507839][ T7174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.800575][ T14] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 414.830418][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.550370][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.561616][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 415.567728][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 415.573824][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.077931][ T14] usb 3-1: device descriptor read/all, error -71 [ 418.207249][ T7182] bond0: (slave netdevsim0): Releasing backup interface [ 418.347134][ T7182] team0: Port device netdevsim0 added [ 418.366104][ T7193] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 418.481301][ T7193] team0: Port device netdevsim0 removed [ 418.514323][ T7193] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 420.350537][ T4319] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 421.118042][ T4319] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 421.169349][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.201459][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 421.201940][ T4319] usb 3-1: Product: syz [ 421.255666][ T4319] usb 3-1: Manufacturer: syz [ 421.265885][ T4319] usb 3-1: SerialNumber: syz [ 421.326523][ T7236] loop3: detected capacity change from 0 to 1024 [ 421.390808][ T7236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 421.550621][ T126] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 421.699025][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 421.770414][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 421.778166][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.819299][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.840000][ T126] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.879359][ T126] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 421.890398][ T4316] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 422.737949][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.746292][ T126] usb 5-1: Product: syz [ 422.750920][ T126] usb 5-1: Manufacturer: syz [ 422.755757][ T126] usb 5-1: SerialNumber: syz [ 422.780456][ T126] usb 5-1: config 0 descriptor?? [ 422.928646][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.974952][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.298040][ T11] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 425.478959][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 425.487608][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 425.568416][ T14] usb 5-1: USB disconnect, device number 28 [ 425.697086][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 425.711549][ T4316] usb 1-1: no configurations [ 425.726592][ T4316] usb 1-1: can't read configurations, error -22 [ 427.018856][ T4319] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 427.086341][ T4319] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 427.260132][ T4319] usb 3-1: failed to enable PITCH for EP 0x1 [ 427.267009][ T4319] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.292804][ T4319] usb 3-1: unit 2 not found! [ 427.311137][ T4319] usb 3-1: unit 64 not found! [ 427.680370][ T7272] loop0: detected capacity change from 0 to 32768 [ 428.424158][ T4319] usb 3-1: USB disconnect, device number 28 [ 428.573714][ T7278] loop4: detected capacity change from 0 to 512 [ 428.668898][ T7278] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.749: corrupted inode contents [ 428.684089][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 428.691254][ T7278] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 428.707851][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 428.715310][ T7278] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.749: corrupted inode contents [ 428.738196][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 428.746207][ T7278] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.749: mark_inode_dirty error [ 428.760712][ T7278] EXT4-fs (loop4): Remounting filesystem read-only [ 428.771844][ T7278] EXT4-fs (loop4): 1 orphan inode deleted [ 428.777693][ T7278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 428.794773][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.153599][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 430.188503][ T7297] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 430.360890][ T7297] bond0: (slave netdevsim0): Releasing backup interface [ 430.550491][ T126] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 430.743071][ T7297] team0: Port device netdevsim0 added [ 430.796319][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.811037][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.864970][ T7303] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 430.874507][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.008968][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.065240][ T7303] team0: Port device netdevsim0 removed [ 431.147543][ T7303] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 431.219576][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 431.241642][ T4316] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 431.250431][ T5700] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 431.368995][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.387295][ T126] usb 5-1: no configurations [ 431.411304][ T126] usb 5-1: can't read configurations, error -22 [ 431.440808][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 431.450814][ T4316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.470574][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 431.485389][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.498587][ T4316] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.518974][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.528440][ T4316] usb 3-1: Product: syz [ 431.533224][ T4316] usb 3-1: Manufacturer: syz [ 431.538339][ T4316] usb 3-1: SerialNumber: syz [ 431.551477][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 431.593116][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.631690][ T5700] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.689752][ T5700] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 431.710091][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.739839][ T5700] usb 4-1: Product: syz [ 431.744171][ T5700] usb 4-1: Manufacturer: syz [ 431.748817][ T5700] usb 4-1: SerialNumber: syz [ 431.765212][ T5700] usb 4-1: config 0 descriptor?? [ 431.780029][ T4316] usb 3-1: 0:2 : does not exist [ 431.795422][ T4316] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 431.856738][ T4316] usb 3-1: USB disconnect, device number 29 [ 431.919799][ T7115] udevd[7115]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.044830][ T5700] usb 4-1: USB disconnect, device number 29 [ 432.400462][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 432.400531][ T26] audit: type=1326 audit(1782773422.966:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 432.982874][ T4322] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 433.056346][ T26] audit: type=1326 audit(1782773422.966:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.088309][ T26] audit: type=1326 audit(1782773422.966:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.123660][ T26] audit: type=1326 audit(1782773422.966:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.179372][ T4322] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 433.193606][ T26] audit: type=1326 audit(1782773422.966:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.209617][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.267466][ T4322] usb 1-1: Product: syz [ 433.277250][ T26] audit: type=1326 audit(1782773422.966:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.287305][ T4322] usb 1-1: Manufacturer: syz [ 433.356020][ T4322] usb 1-1: SerialNumber: syz [ 433.551510][ T26] audit: type=1326 audit(1782773422.966:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.764125][ T26] audit: type=1326 audit(1782773422.966:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 433.843999][ T26] audit: type=1326 audit(1782773422.966:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 434.108145][ T26] audit: type=1326 audit(1782773422.966:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.4.763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7503b5d68e code=0x7ffc0000 [ 435.559604][ T4322] usb 1-1: 1:1 : unsupported format bits 0x2004 [ 435.576302][ T4322] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 435.609370][ T4322] usb 1-1: failed to enable PITCH for EP 0x1 [ 435.650552][ T4322] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 435.677955][ T4322] usb 1-1: unit 2 not found! [ 435.698076][ T4322] usb 1-1: unit 64 not found! [ 435.784263][ T4322] usb 1-1: USB disconnect, device number 26 [ 436.273562][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.802352][ T7368] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 438.400438][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 438.400627][ T26] audit: type=1326 audit(1782773428.766:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 438.820594][ T26] audit: type=1326 audit(1782773428.766:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 439.001793][ T7368] bond0: (slave netdevsim0): Releasing backup interface [ 439.021941][ T26] audit: type=1326 audit(1782773428.766:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 439.292164][ T26] audit: type=1326 audit(1782773428.766:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.066691][ T26] audit: type=1326 audit(1782773428.766:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.147738][ T26] audit: type=1326 audit(1782773428.766:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.176902][ T7368] team0: Port device netdevsim0 added [ 440.249729][ T26] audit: type=1326 audit(1782773428.766:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.360373][ T22] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 440.381289][ T26] audit: type=1326 audit(1782773428.766:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.455086][ T7374] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 440.477024][ T26] audit: type=1326 audit(1782773428.766:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 440.560485][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 440.826169][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.877647][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.893690][ T22] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.947605][ T26] audit: type=1326 audit(1782773428.766:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a55d68e code=0x7ffc0000 [ 440.991845][ T22] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 441.011190][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.019509][ T22] usb 2-1: Product: syz [ 441.024306][ T22] usb 2-1: Manufacturer: syz [ 441.029050][ T22] usb 2-1: SerialNumber: syz [ 441.037441][ T22] usb 2-1: config 0 descriptor?? [ 441.053232][ T7374] team0: Port device netdevsim0 removed [ 441.082474][ T7374] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 441.173959][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 441.290220][ T4319] usb 2-1: USB disconnect, device number 33 [ 441.630590][ T22] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 441.838102][ T22] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 441.876751][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.916901][ T22] usb 5-1: Product: syz [ 441.927081][ T22] usb 5-1: Manufacturer: syz [ 441.937217][ T22] usb 5-1: SerialNumber: syz [ 441.956141][ T7396] loop2: detected capacity change from 0 to 32768 [ 441.996730][ T7396] (syz.2.781,7396,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.210515][ T7396] (syz.2.781,7396,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.250188][ T7396] JBD2: Ignoring recovery information on journal [ 443.094268][ T7396] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 444.151071][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 444.244916][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 444.245432][ T26] audit: type=1326 audit(1782773434.876:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 444.277090][ T26] audit: type=1326 audit(1782773434.876:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 444.911611][ T26] audit: type=1326 audit(1782773434.876:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 445.062944][ T26] audit: type=1326 audit(1782773434.876:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 445.258963][ T22] usb 5-1: 1:1 : unsupported format bits 0x2004 [ 445.265396][ T22] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 445.276413][ T22] usb 5-1: failed to enable PITCH for EP 0x1 [ 445.394570][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.404458][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.975119][ T22] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 445.994981][ T22] usb 5-1: unit 2 not found! [ 446.003938][ T22] usb 5-1: unit 64 not found! [ 446.071836][ T22] usb 5-1: USB disconnect, device number 31 [ 446.113153][ T26] audit: type=1326 audit(1782773434.886:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 446.337853][ T26] audit: type=1326 audit(1782773434.886:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 446.363111][ T26] audit: type=1326 audit(1782773434.886:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 446.416457][ T26] audit: type=1326 audit(1782773434.886:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 447.221051][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.240392][ T26] audit: type=1326 audit(1782773434.886:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9a59ce59 code=0x7ffc0000 [ 447.287408][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 447.333432][ T26] audit: type=1326 audit(1782773434.886:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.0.787" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd9a55d68e code=0x7ffc0000 [ 447.645280][ T7444] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 447.657125][ T4289] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 447.666086][ T5702] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 449.780418][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 450.201895][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 450.401056][ T5702] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 450.408917][ T5702] usb 5-1: can't read configurations, error -71 [ 452.470473][ T14] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 452.580447][ T5700] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 452.656431][ T7480] loop1: detected capacity change from 0 to 1764 [ 452.728937][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.653960][ T14] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 453.766861][ T7488] loop0: detected capacity change from 0 to 64 [ 453.991262][ T14] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 454.046207][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.273467][ T7480] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 454.540431][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.549654][ T14] usb 3-1: Product: syz [ 454.564490][ T14] usb 3-1: Manufacturer: syz [ 454.569205][ T14] usb 3-1: SerialNumber: syz [ 454.690650][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.016190][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.537916][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.660393][ T14] usb 3-1: can't set config #1, error -71 [ 455.668192][ T14] usb 3-1: USB disconnect, device number 30 [ 455.953873][ T7499] loop1: detected capacity change from 0 to 512 [ 456.095602][ T5700] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.112334][ T7499] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 456.799834][ T5700] usb 4-1: no configurations [ 456.805502][ T5700] usb 4-1: can't read configurations, error -22 [ 457.648579][ T7509] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 457.725484][ T7509] bond0: (slave netdevsim0): Releasing backup interface [ 457.994815][ T7509] team0: Port device netdevsim0 added [ 458.785600][ T7514] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 459.030673][ T7530] loop1: detected capacity change from 0 to 512 [ 459.037726][ T7530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.839837][ T7530] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 459.856603][ T7530] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.819: corrupted in-inode xattr [ 459.905126][ T7514] team0: Port device netdevsim0 removed [ 459.910892][ T7530] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.819: couldn't read orphan inode 15 (err -117) [ 459.928100][ T7530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 459.949518][ T7514] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 460.196070][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 460.484494][ T5696] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 461.416108][ T22] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 461.438571][ T5696] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 461.462788][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.474537][ T5696] usb 3-1: Product: syz [ 461.479307][ T5696] usb 3-1: Manufacturer: syz [ 461.486585][ T5696] usb 3-1: SerialNumber: syz [ 461.609081][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.625605][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.639017][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.651647][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.891402][ T4678] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 461.912024][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 461.919831][ T22] usb 2-1: no configurations [ 462.509018][ T4997] Bluetooth: hci5: Frame reassembly failed (-84) [ 462.522248][ T4997] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 462.635066][ T22] usb 2-1: can't read configurations, error -22 [ 462.739865][ T4678] usb 4-1: Using ep0 maxpacket: 16 [ 462.747736][ T4678] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.768835][ T4678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.793005][ T4678] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.816077][ T4678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.853196][ T4678] usb 4-1: Product: syz [ 462.877150][ T4678] usb 4-1: Manufacturer: syz [ 462.897722][ T4678] usb 4-1: SerialNumber: syz [ 463.126951][ T4678] usb 4-1: 0:2 : does not exist [ 463.143603][ T4678] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 463.395972][ T4678] usb 4-1: USB disconnect, device number 32 [ 464.321735][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.510518][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 464.518894][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 466.524669][ T5696] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 466.557344][ T5696] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 466.618135][ T5696] usb 3-1: failed to enable PITCH for EP 0x1 [ 466.660603][ T5696] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 466.681398][ T5696] usb 3-1: unit 2 not found! [ 466.700163][ T5696] usb 3-1: unit 64 not found! [ 466.849079][ T5702] usb 3-1: USB disconnect, device number 31 [ 467.173392][ T7640] loop3: detected capacity change from 0 to 1764 [ 470.657225][ T7666] process 'syz.0.869' launched './file1' with NULL argv: empty string added [ 472.675758][ T7677] input: syz0 as /devices/virtual/input/input13 [ 475.864119][ T7701] binder: BINDER_SET_CONTEXT_MGR already set [ 475.870729][ T7701] binder: 7698:7701 ioctl 4018620d 200000004a80 returned -16 [ 476.283834][ T4798] wlan0: Trigger new scan to find an IBSS to join [ 478.226829][ T7712] binder: BINDER_SET_CONTEXT_MGR already set [ 478.233116][ T7712] binder: 7709:7712 ioctl 4018620d 200000004a80 returned -16 [ 479.151980][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 480.111209][ T4419] wlan0: Trigger new scan to find an IBSS to join [ 480.111266][ T4617] wlan0: Trigger new scan to find an IBSS to join [ 481.835550][ T5757] wlan0: Creating new IBSS network, BSSID 76:bd:2d:60:d0:82 [ 484.110591][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 484.117267][ T4338] wlan0: Trigger new scan to find an IBSS to join [ 485.586939][ T5757] wlan0: Creating new IBSS network, BSSID 3a:a1:24:be:05:14 [ 487.464724][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 488.115667][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 490.619915][ T5361] wlan0: Creating new IBSS network, BSSID 3a:a5:6a:c7:18:0f [ 492.110608][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 493.176020][ T4532] wlan0: Creating new IBSS network, BSSID 92:72:9e:5f:d4:d9 [ 498.089284][ T7821] binder: BINDER_SET_CONTEXT_MGR already set [ 498.095512][ T7821] binder: 7819:7821 ioctl 4018620d 200000004a80 returned -16 [ 500.120980][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 504.132021][ T4798] wlan0: Trigger new scan to find an IBSS to join [ 505.320757][ T4798] wlan0: Creating new IBSS network, BSSID c6:32:85:57:45:51 [ 506.294265][ T7851] binder: BINDER_SET_CONTEXT_MGR already set [ 506.325874][ T7851] binder: 7850:7851 ioctl 4018620d 200000004a80 returned -16 [ 507.187882][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.194304][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.670436][ T4317] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 508.755721][ T7893] binder: BINDER_SET_CONTEXT_MGR already set [ 508.762396][ T7893] binder: 7891:7893 ioctl 4018620d 200000004a80 returned -16 [ 509.871832][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.910726][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.128610][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.150726][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.971130][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.980180][ T4317] usb 3-1: no configurations [ 510.988035][ T4317] usb 3-1: can't read configurations, error -22 [ 511.822097][ T7911] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 511.914288][ T7911] loop1: detected capacity change from 0 to 512 [ 512.110509][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 512.546275][ T7911] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.932: corrupted inode contents [ 512.730668][ T7911] EXT4-fs (loop1): Remounting filesystem read-only [ 512.737290][ T7911] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 512.812056][ T7911] EXT4-fs (loop1): Remounting filesystem read-only [ 512.900570][ T7911] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.932: corrupted inode contents [ 513.037306][ T7911] EXT4-fs (loop1): Remounting filesystem read-only [ 513.122973][ T7911] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.932: mark_inode_dirty error [ 513.150545][ T4386] wlan0: Trigger new scan to find an IBSS to join [ 513.264831][ T7911] EXT4-fs (loop1): Remounting filesystem read-only [ 513.347135][ T7911] EXT4-fs (loop1): 1 orphan inode deleted [ 513.481490][ T7911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 514.355917][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 515.181382][ T75] wlan0: Creating new IBSS network, BSSID 66:0a:75:5f:67:65 [ 515.191951][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 516.746528][ T7961] input: syz0 as /devices/virtual/input/input14 [ 517.497913][ T75] wlan0: Trigger new scan to find an IBSS to join [ 518.560822][ T4321] wlan0: Creating new IBSS network, BSSID 36:ab:37:b1:13:78 [ 520.369799][ T7985] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 520.490681][ T7985] loop1: detected capacity change from 0 to 512 [ 520.743425][ T7985] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.950: corrupted inode contents [ 520.832846][ T7985] EXT4-fs (loop1): Remounting filesystem read-only [ 520.849140][ T7985] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 520.899238][ T7985] EXT4-fs (loop1): Remounting filesystem read-only [ 520.930806][ T7985] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.950: corrupted inode contents [ 521.009337][ T7985] EXT4-fs (loop1): Remounting filesystem read-only [ 521.044781][ T7985] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.950: mark_inode_dirty error [ 521.098695][ T7985] EXT4-fs (loop1): Remounting filesystem read-only [ 521.150551][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 521.157235][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 521.188202][ T7985] EXT4-fs (loop1): 1 orphan inode deleted [ 521.228335][ T7985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 521.571059][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 522.110581][ T4321] wlan0: Trigger new scan to find an IBSS to join [ 522.983849][ T8007] input: syz0 as /devices/virtual/input/input15 [ 524.264373][ T46] wlan0: Trigger new scan to find an IBSS to join [ 525.070380][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 525.150569][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 526.502103][ T46] wlan0: Creating new IBSS network, BSSID be:44:fc:a1:99:21 [ 526.541743][ T4532] wlan0: Creating new IBSS network, BSSID e2:00:86:d6:f0:33 [ 528.110759][ T4416] wlan0: Trigger new scan to find an IBSS to join [ 528.117712][ T46] wlan0: Creating new IBSS network, BSSID 8e:d6:ca:25:49:ac [ 529.308328][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 529.538498][ T8051] input: syz0 as /devices/virtual/input/input16 [ 534.489043][ T4386] wlan0: Trigger new scan to find an IBSS to join [ 534.489065][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 534.885112][ T8081] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 534.937802][ T8081] loop1: detected capacity change from 0 to 512 [ 534.960035][ T8084] loop2: detected capacity change from 0 to 512 [ 534.971675][ T8084] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 535.009278][ T8081] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.965: corrupted inode contents [ 535.022613][ T8081] EXT4-fs (loop1): Remounting filesystem read-only [ 535.049040][ T8081] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 535.075270][ T4376] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.276432][ T8081] EXT4-fs (loop1): Remounting filesystem read-only [ 535.993176][ T8081] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.965: corrupted inode contents [ 536.421235][ T75] wlan0: Trigger new scan to find an IBSS to join [ 536.433126][ T8081] EXT4-fs (loop1): Remounting filesystem read-only [ 536.510550][ T4338] wlan0: Creating new IBSS network, BSSID 22:40:e7:37:e1:f6 [ 536.562942][ T4416] wlan0: Creating new IBSS network, BSSID 6a:c9:f8:ad:9d:eb [ 536.634249][ T8081] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.965: mark_inode_dirty error [ 536.648571][ T4319] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 537.043843][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.060849][ T8081] EXT4-fs (loop1): Remounting filesystem read-only [ 537.069919][ T8081] EXT4-fs (loop1): 1 orphan inode deleted [ 537.077574][ T8081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 537.090872][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.159340][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.281321][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.392225][ T8104] input: syz0 as /devices/virtual/input/input17 [ 538.270293][ T4319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 538.308842][ T4319] usb 3-1: no configurations [ 538.335419][ T4319] usb 3-1: can't read configurations, error -22 [ 538.381831][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 542.691047][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 543.062510][ T8135] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 544.282378][ T4532] wlan0: Creating new IBSS network, BSSID 4e:a6:4c:8a:09:18 [ 545.010809][ T8138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 545.150645][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 545.850587][ T8138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 545.867205][ T8138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 545.941721][ T8138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 545.948040][ T8138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.376603][ T8158] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 546.567384][ T8158] loop2: detected capacity change from 0 to 512 [ 547.080456][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout [ 547.457400][ T8158] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.993: corrupted inode contents [ 547.515202][ T8158] EXT4-fs (loop2): Remounting filesystem read-only [ 547.522514][ T8158] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 547.532699][ T8158] EXT4-fs (loop2): Remounting filesystem read-only [ 547.539318][ T8158] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.993: corrupted inode contents [ 547.570429][ T8158] EXT4-fs (loop2): Remounting filesystem read-only [ 547.609926][ T8158] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.993: mark_inode_dirty error [ 547.646684][ T8158] EXT4-fs (loop2): Remounting filesystem read-only [ 547.687228][ T8158] EXT4-fs (loop2): 1 orphan inode deleted [ 547.740361][ T4678] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 547.789652][ T8158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 547.880444][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 547.881304][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.020712][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 548.027784][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 548.055756][ T4678] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 548.264632][ T4678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.391008][ T4678] usb 4-1: Product: syz [ 548.453529][ T4678] usb 4-1: Manufacturer: syz [ 548.690774][ T4678] usb 4-1: SerialNumber: syz [ 549.773046][ T4798] wlan0: Trigger new scan to find an IBSS to join [ 550.028628][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 550.112288][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 550.118947][ T5757] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 550.177620][ T4798] Bluetooth: hci5: Frame reassembly failed (-84) [ 552.123003][ T4532] wlan0: Creating new IBSS network, BSSID 2e:b2:2f:be:36:3a [ 552.190398][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 552.190446][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 552.730935][ T8210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 552.758405][ T8210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.766681][ T8210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.776607][ T8210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 552.822084][ T8210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 552.917015][ T4678] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 552.923817][ T4678] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 552.951988][ T4678] usb 4-1: failed to enable PITCH for EP 0x1 [ 552.970681][ T8213] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 553.038522][ T4678] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 553.837120][ T4678] usb 4-1: unit 2 not found! [ 553.842365][ T4678] usb 4-1: unit 64 not found! [ 553.931467][ T4678] usb 4-1: USB disconnect, device number 33 [ 554.121582][ T46] wlan0: Trigger new scan to find an IBSS to join [ 554.190397][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 554.760288][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.830400][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 554.830418][ T4288] Bluetooth: hci3: command 0x0c1a tx timeout [ 554.830475][ T4288] Bluetooth: hci0: command 0x0c1a tx timeout [ 555.867306][ T8241] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.017701][ T8243] loop3: detected capacity change from 0 to 512 [ 556.095267][ T8243] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1013: corrupted inode contents [ 556.139907][ T8243] EXT4-fs (loop3): Remounting filesystem read-only [ 556.146809][ T8243] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 556.158555][ T4386] wlan0: Creating new IBSS network, BSSID e6:25:03:9c:29:82 [ 556.202928][ T8243] EXT4-fs (loop3): Remounting filesystem read-only [ 556.211086][ T8243] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1013: corrupted inode contents [ 556.223759][ T8243] EXT4-fs (loop3): Remounting filesystem read-only [ 556.230537][ T8243] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.1013: mark_inode_dirty error [ 556.244086][ T4545] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.642768][ T5361] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.161497][ T8243] EXT4-fs (loop3): Remounting filesystem read-only [ 557.211590][ T8243] EXT4-fs (loop3): 1 orphan inode deleted [ 557.250764][ T8243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.974870][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 558.700555][ T5696] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 559.530449][ T8263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.538914][ T8263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.566962][ T8263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.579917][ T8263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.591359][ T5696] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 559.618264][ T8263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 559.876987][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.873399][ T75] wlan0: Trigger new scan to find an IBSS to join [ 560.976639][ T5696] usb 4-1: Product: syz [ 561.006934][ T5696] usb 4-1: Manufacturer: syz [ 561.034006][ T5696] usb 4-1: SerialNumber: syz [ 561.411039][ T5696] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 561.437815][ T5696] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 561.510414][ T5696] usb 4-1: failed to enable PITCH for EP 0x1 [ 561.544752][ T5696] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 561.552346][ T4288] Bluetooth: hci2: command 0x0c1a tx timeout [ 561.558457][ T4288] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.582616][ T5696] usb 4-1: unit 2 not found! [ 561.587310][ T5696] usb 4-1: unit 64 not found! [ 561.640296][ T4288] Bluetooth: hci4: command 0x0c1a tx timeout [ 561.646531][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.646552][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.662919][ T5696] usb 4-1: USB disconnect, device number 34 [ 566.728775][ T4419] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.740762][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 567.471194][ T4617] wlan0: Trigger new scan to find an IBSS to join [ 568.004168][ T8316] loop0: detected capacity change from 0 to 512 [ 568.337163][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.343981][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.355944][ T5702] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 568.363477][ T8316] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.1027: corrupted inode contents [ 568.388771][ T8316] EXT4-fs (loop0): Remounting filesystem read-only [ 568.398363][ T8316] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 568.408965][ T8316] EXT4-fs (loop0): Remounting filesystem read-only [ 568.674533][ T8316] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.1027: corrupted inode contents [ 568.748676][ T8316] EXT4-fs (loop0): Remounting filesystem read-only [ 568.766361][ T8316] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.1027: mark_inode_dirty error [ 568.780392][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 568.796761][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 568.815618][ T8316] EXT4-fs (loop0): Remounting filesystem read-only [ 568.823254][ T5702] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 568.840415][ T8316] EXT4-fs (loop0): 1 orphan inode deleted [ 568.847162][ T5702] usb 4-1: config 4 has no interface number 0 [ 568.857366][ T8316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 568.866292][ T5702] usb 4-1: config 4 interface 127 has no altsetting 0 [ 568.894560][ T5702] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 568.912898][ T4798] wlan0: Creating new IBSS network, BSSID ee:c3:6f:a3:0d:3e [ 568.923757][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.956132][ T5702] usb 4-1: Product: syz [ 568.974965][ T5702] usb 4-1: Manufacturer: syz [ 568.984466][ T5702] usb 4-1: SerialNumber: syz [ 569.435087][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 569.543815][ T8332] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.925294][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 570.925401][ T26] audit: type=1326 audit(1782773561.566:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 571.083125][ T4798] wlan0: Trigger new scan to find an IBSS to join [ 571.619702][ T5702] usbhid 4-1:4.127: couldn't find an input interrupt endpoint [ 571.823803][ T5702] usb 4-1: USB disconnect, device number 35 [ 571.845763][ T26] audit: type=1326 audit(1782773561.566:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 571.873296][ T26] audit: type=1326 audit(1782773561.566:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 572.033722][ T26] audit: type=1326 audit(1782773561.566:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 572.058771][ T26] audit: type=1326 audit(1782773561.566:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 572.103028][ T26] audit: type=1326 audit(1782773561.566:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 572.130384][ T9] wlan0: Trigger new scan to find an IBSS to join [ 572.542354][ T26] audit: type=1326 audit(1782773561.566:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 572.813054][ T26] audit: type=1326 audit(1782773561.566:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82bf75d68e code=0x7ffc0000 [ 572.838538][ T26] audit: type=1326 audit(1782773561.576:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f82bf79e157 code=0x7ffc0000 [ 572.863129][ T26] audit: type=1326 audit(1782773561.576:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1037" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82bf79ce59 code=0x7ffc0000 [ 575.143377][ T9] wlan0: Trigger new scan to find an IBSS to join [ 575.230410][ T5702] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 575.847700][ T5702] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 576.044538][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.078527][ T5702] usb 3-1: Product: syz [ 576.100421][ T5702] usb 3-1: Manufacturer: syz [ 576.115250][ T5702] usb 3-1: SerialNumber: syz [ 577.021076][ T8375] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.070347][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 577.139747][ T8375] loop1: detected capacity change from 0 to 512 [ 577.272688][ T8375] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1046: corrupted inode contents [ 577.335563][ T8375] EXT4-fs (loop1): Remounting filesystem read-only [ 577.378698][ T8375] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 577.417939][ T8375] EXT4-fs (loop1): Remounting filesystem read-only [ 577.425826][ T8375] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.1046: corrupted inode contents [ 577.440272][ T8375] EXT4-fs (loop1): Remounting filesystem read-only [ 577.450479][ T8375] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.1046: mark_inode_dirty error [ 577.484147][ T8375] EXT4-fs (loop1): Remounting filesystem read-only [ 577.500592][ T8375] EXT4-fs (loop1): 1 orphan inode deleted [ 577.527079][ T8375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 578.301407][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 578.743312][ T4617] wlan0: Creating new IBSS network, BSSID f6:a8:9c:ef:d5:5f [ 578.753386][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 578.910852][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 578.918851][ T4290] Bluetooth: hci5: command 0x1003 tx timeout [ 579.274894][ T4338] wlan0: Trigger new scan to find an IBSS to join [ 579.800576][ T5702] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 579.820324][ T5702] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 579.856333][ T5702] usb 3-1: failed to enable PITCH for EP 0x1 [ 579.869607][ T5702] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 579.896359][ T5702] usb 3-1: unit 2 not found! [ 579.902152][ T5702] usb 3-1: unit 64 not found! [ 579.923595][ T5702] usb 3-1: USB disconnect, device number 36 [ 580.885511][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.886549][ T8442] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.070806][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 585.792136][ T8442] loop4: detected capacity change from 0 to 512 [ 586.121197][ T4617] wlan0: Trigger new scan to find an IBSS to join [ 586.170755][ T8442] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1059: corrupted inode contents [ 586.334632][ T8442] EXT4-fs (loop4): Remounting filesystem read-only [ 586.343406][ T8442] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 586.363216][ T8442] EXT4-fs (loop4): Remounting filesystem read-only [ 586.540485][ T8442] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1059: corrupted inode contents [ 586.591055][ T8442] EXT4-fs (loop4): Remounting filesystem read-only [ 586.627484][ T8442] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.1059: mark_inode_dirty error [ 586.658167][ T8442] EXT4-fs (loop4): Remounting filesystem read-only [ 586.704488][ T8442] EXT4-fs (loop4): 1 orphan inode deleted [ 586.741278][ T8442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 587.008045][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 587.597510][ T5361] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.071822][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 589.500306][ T129] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 589.661117][ T129] usb 4-1: device descriptor read/64, error -71 [ 590.110704][ T4617] wlan0: Trigger new scan to find an IBSS to join [ 590.390373][ T129] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 591.659838][ T8484] input: syz0 as /devices/virtual/input/input18 [ 591.875204][ T129] usb 4-1: device descriptor read/64, error -71 [ 592.050505][ T129] usb usb4-port1: attempt power cycle [ 594.371636][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 597.585991][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 597.592601][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 597.604028][ T4485] wlan0: Creating new IBSS network, BSSID ba:ac:32:b4:7f:af [ 598.551590][ T4997] wlan0: Creating new IBSS network, BSSID fe:25:96:89:bf:59 [ 599.804020][ T4997] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 600.340341][ T5198] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 600.521807][ T5198] usb 2-1: device descriptor read/64, error -71 [ 600.850526][ T5198] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 601.180878][ T4416] wlan0: Trigger new scan to find an IBSS to join [ 601.489089][ T5198] usb 2-1: device descriptor read/64, error -71 [ 602.450509][ T5198] usb usb2-port1: attempt power cycle [ 603.517946][ T5361] wlan0: Creating new IBSS network, BSSID ba:74:01:18:d5:95 [ 603.562199][ T5198] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 604.087883][ T5198] usb 2-1: device descriptor read/8, error -71 [ 604.112716][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 610.156734][ T4546] wlan0: Trigger new scan to find an IBSS to join [ 610.271094][ T4545] wlan0: Creating new IBSS network, BSSID 4a:fa:13:46:6f:f6 [ 611.694824][ T8580] binder: BINDER_SET_CONTEXT_MGR already set [ 611.701188][ T8580] binder: 8570:8580 ioctl 4018620d 200000004a80 returned -16 [ 611.868269][ T5361] wlan0: Creating new IBSS network, BSSID e6:98:d5:2e:ed:2f [ 613.084825][ T8565] wlan0: Trigger new scan to find an IBSS to join [ 615.250376][ T4316] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 616.920450][ T4316] usb 5-1: device descriptor read/64, error -71 [ 617.849102][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 618.030616][ T4316] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 621.566071][ T4386] wlan0: Trigger new scan to find an IBSS to join [ 623.644915][ T46] wlan0: Creating new IBSS network, BSSID 82:3e:9e:f6:75:bf [ 625.480314][ T5697] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 626.120305][ T4416] wlan0: Trigger new scan to find an IBSS to join [ 626.120460][ T5697] usb 4-1: device descriptor read/64, error -71 [ 627.840455][ T5697] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 628.051441][ T5697] usb 4-1: device descriptor read/64, error -71 [ 628.216290][ T5697] usb usb4-port1: attempt power cycle [ 629.070647][ T5757] wlan0: Trigger new scan to find an IBSS to join [ 629.430787][ T5697] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 629.714491][ T5697] usb 4-1: device not accepting address 41, error -71 [ 629.723118][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.730127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.111115][ T4997] wlan0: Trigger new scan to find an IBSS to join [ 632.160795][ T75] wlan0: Creating new IBSS network, BSSID da:b9:5c:4e:c4:59 [ 632.560886][ T9] wlan0: Creating new IBSS network, BSSID ea:40:65:ea:d9:16 [ 633.544572][ T4416] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 634.273235][ T4419] wlan0: Trigger new scan to find an IBSS to join [ 638.022615][ T8736] loop0: detected capacity change from 0 to 64 [ 638.110842][ T4321] wlan0: Trigger new scan to find an IBSS to join [ 639.410315][ T14] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 639.734703][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 639.946665][ T14] usb 2-1: no configurations [ 640.821819][ T14] usb 2-1: can't read configurations, error -22 [ 641.450488][ T14] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 641.650433][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 641.710908][ T14] usb 2-1: no configurations [ 641.738061][ T14] usb 2-1: can't read configurations, error -22 [ 641.776614][ T14] usb usb2-port1: attempt power cycle [ 642.210266][ T14] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 642.360485][ T14] usb 2-1: device descriptor read/8, error -71 [ 644.111037][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 646.142418][ T4532] wlan0: Trigger new scan to find an IBSS to join [ 648.339832][ T8807] binder: BINDER_SET_CONTEXT_MGR already set [ 648.346297][ T8807] binder: 8798:8807 ioctl 4018620d 200000004a80 returned -16 [ 649.232897][ T4545] wlan0: Trigger new scan to find an IBSS to join [ 650.173819][ T75] wlan0: Trigger new scan to find an IBSS to join [ 650.250679][ T129] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 650.720735][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 650.729072][ T26] audit: type=1326 audit(1782773641.356:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 650.930754][ T26] audit: type=1326 audit(1782773641.356:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 651.030361][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 651.041062][ T129] usb 1-1: no configurations [ 651.059872][ T129] usb 1-1: can't read configurations, error -22 [ 652.139364][ T129] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 653.070903][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 653.080256][ T129] usb 1-1: device not accepting address 28, error -71 [ 653.925081][ T129] usb usb1-port1: attempt power cycle [ 654.110843][ T5361] wlan0: Trigger new scan to find an IBSS to join [ 655.301674][ T9] wlan0: Trigger new scan to find an IBSS to join [ 655.309346][ T4617] wlan0: Trigger new scan to find an IBSS to join [ 658.327704][ T26] audit: type=1326 audit(1782773648.986:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 658.530504][ T4419] wlan0: Trigger new scan to find an IBSS to join [ 659.078524][ T26] audit: type=1326 audit(1782773648.986:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.150412][ T46] wlan0: Creating new IBSS network, BSSID 9a:18:4a:73:e0:fe [ 659.158587][ T9] wlan0: Trigger new scan to find an IBSS to join [ 659.212856][ T26] audit: type=1326 audit(1782773648.986:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.302743][ T26] audit: type=1326 audit(1782773648.986:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.339931][ T26] audit: type=1326 audit(1782773648.986:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.460486][ T6870] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 659.563007][ T26] audit: type=1326 audit(1782773648.986:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.611986][ T26] audit: type=1326 audit(1782773648.986:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.638941][ T26] audit: type=1326 audit(1782773648.986:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 659.700464][ T6870] usb 5-1: Using ep0 maxpacket: 16 [ 659.706891][ T26] audit: type=1326 audit(1782773648.986:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 660.123241][ T46] wlan0: Trigger new scan to find an IBSS to join [ 660.208184][ T6870] usb 5-1: no configurations [ 660.212926][ T6870] usb 5-1: can't read configurations, error -22 [ 660.221408][ T4321] wlan0: Creating new IBSS network, BSSID 82:b6:0a:7d:8a:c4 [ 660.221803][ T75] wlan0: Creating new IBSS network, BSSID ca:80:49:2d:78:86 [ 660.582669][ T6870] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 660.699110][ T4419] ------------[ cut here ]------------ [ 660.704735][ T26] audit: type=1326 audit(1782773648.986:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.4.1167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7503b9ce59 code=0x7ffc0000 [ 660.705532][ T4419] WARNING: CPU: 0 PID: 4419 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 660.739570][ T4419] Modules linked in: [ 660.743879][ T4419] CPU: 0 PID: 4419 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 660.751919][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.762492][ T4419] Workqueue: cfg80211 cfg80211_event_work [ 660.768422][ T4419] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 660.775084][ T4419] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 660.796817][ T4419] RSP: 0000:ffffc90004affac0 EFLAGS: 00010293 [ 660.803269][ T4419] RAX: ffffffff89924969 RBX: 1ffff9200095ff5c RCX: ffff8880253f5a00 [ 660.811605][ T4419] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 660.819696][ T4419] RBP: ffffc90004affb70 R08: ffffffff90af22a7 R09: 1ffffffff215e454 [ 660.827944][ T4419] R10: dffffc0000000000 R11: fffffbfff215e455 R12: ffff888053deb5b8 [ 660.836168][ T4419] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888077980c90 [ 660.844511][ T4419] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 660.853646][ T4419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.860465][ T4419] CR2: 00007f9f811ea540 CR3: 00000000784e4000 CR4: 00000000003506f0 [ 660.868585][ T4419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 660.877353][ T4419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 660.886213][ T4419] Call Trace: [ 660.889727][ T4419] [ 660.893119][ T4419] ? trace_rdev_return_void+0x240/0x240 [ 660.899108][ T4419] cfg80211_process_wdev_events+0x359/0x4d0 [ 660.905492][ T4419] ? process_one_work+0x7b4/0x1160 [ 660.910915][ T4419] cfg80211_process_rdev_events+0x9d/0x110 [ 660.916916][ T4419] cfg80211_event_work+0x2b/0x40 [ 660.922022][ T4419] process_one_work+0x8ab/0x1160 [ 660.927432][ T4419] ? worker_detach_from_pool+0x240/0x240 [ 660.933342][ T4419] ? _raw_spin_lock_irq+0xb7/0xf0 [ 660.938567][ T4419] ? _raw_spin_lock_irqsave+0x100/0x100 [ 660.944361][ T4419] ? wq_worker_running+0x97/0x190 [ 660.949685][ T4419] worker_thread+0xaf5/0x12a0 [ 660.954760][ T4419] kthread+0x29d/0x330 [ 660.959054][ T4419] ? worker_clr_flags+0x1a0/0x1a0 [ 660.964702][ T4419] ? kthread_blkcg+0xd0/0xd0 [ 660.969597][ T4419] ret_from_fork+0x1f/0x30 [ 660.974461][ T4419] [ 660.977683][ T4419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 660.985102][ T4419] CPU: 0 PID: 4419 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 660.992746][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.002924][ T4419] Workqueue: cfg80211 cfg80211_event_work [ 661.009032][ T4419] Call Trace: [ 661.012511][ T4419] [ 661.015587][ T4419] dump_stack_lvl+0x188/0x24e [ 661.020340][ T4419] ? memcpy+0x3c/0x60 [ 661.024462][ T4419] ? show_regs_print_info+0x12/0x12 [ 661.029754][ T4419] ? load_image+0x410/0x410 [ 661.034299][ T4419] panic+0x2d3/0x710 [ 661.038251][ T4419] ? bpf_jit_dump+0xd0/0xd0 [ 661.042873][ T4419] ? __warn+0x2e0/0x4f0 [ 661.047234][ T4419] __warn+0x2f8/0x4f0 [ 661.051269][ T4419] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 661.056930][ T4419] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 661.062534][ T4419] report_bug+0x2ba/0x4f0 [ 661.067408][ T4419] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 661.072987][ T4419] handle_bug+0x3a/0x70 [ 661.077452][ T4419] exc_invalid_op+0x16/0x40 [ 661.081987][ T4419] asm_exc_invalid_op+0x16/0x20 [ 661.087235][ T4419] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 661.093502][ T4419] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 d7 ef f7 0f 0b eb bf e8 a7 d7 ef f7 <0f> 0b eb b6 e8 9e d7 ef f7 0f 0b e9 82 fd ff ff e8 92 d7 ef f7 0f [ 661.113409][ T4419] RSP: 0000:ffffc90004affac0 EFLAGS: 00010293 [ 661.119583][ T4419] RAX: ffffffff89924969 RBX: 1ffff9200095ff5c RCX: ffff8880253f5a00 [ 661.127605][ T4419] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 661.135691][ T4419] RBP: ffffc90004affb70 R08: ffffffff90af22a7 R09: 1ffffffff215e454 [ 661.143713][ T4419] R10: dffffc0000000000 R11: fffffbfff215e455 R12: ffff888053deb5b8 [ 661.151751][ T4419] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888077980c90 [ 661.159922][ T4419] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 661.165502][ T4419] ? trace_rdev_return_void+0x240/0x240 [ 661.171078][ T4419] cfg80211_process_wdev_events+0x359/0x4d0 [ 661.177267][ T4419] ? process_one_work+0x7b4/0x1160 [ 661.182416][ T4419] cfg80211_process_rdev_events+0x9d/0x110 [ 661.188436][ T4419] cfg80211_event_work+0x2b/0x40 [ 661.193416][ T4419] process_one_work+0x8ab/0x1160 [ 661.198404][ T4419] ? worker_detach_from_pool+0x240/0x240 [ 661.204066][ T4419] ? _raw_spin_lock_irq+0xb7/0xf0 [ 661.209151][ T4419] ? _raw_spin_lock_irqsave+0x100/0x100 [ 661.214737][ T4419] ? wq_worker_running+0x97/0x190 [ 661.219783][ T4419] worker_thread+0xaf5/0x12a0 [ 661.224594][ T4419] kthread+0x29d/0x330 [ 661.228695][ T4419] ? worker_clr_flags+0x1a0/0x1a0 [ 661.233751][ T4419] ? kthread_blkcg+0xd0/0xd0 [ 661.238530][ T4419] ret_from_fork+0x1f/0x30 [ 661.243024][ T4419] [ 661.246661][ T4419] Kernel Offset: disabled [ 661.251082][ T4419] Rebooting in 86400 seconds..