last executing test programs: 8m56.215641772s ago: executing program 0 (id=109): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @flow_dissector}, 0x94) pipe(0x0) openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000580)={[{@init_itable_val={'init_itable', 0x3d, 0x7c}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@resuid}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 8m53.456225521s ago: executing program 0 (id=112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 8m47.905237971s ago: executing program 0 (id=121): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m44.859463064s ago: executing program 0 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x65) r5 = dup3(r4, r3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8m43.494407774s ago: executing program 0 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x65) r5 = dup3(r4, r3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8m40.321685739s ago: executing program 0 (id=133): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x804, 0x20000) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) epoll_create1(0x0) 8m23.863240695s ago: executing program 32 (id=133): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x804, 0x20000) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) epoll_create1(0x0) 25.935854149s ago: executing program 3 (id=1134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) 24.895277684s ago: executing program 1 (id=1146): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000300)={0x4000000, 0xffffb1c4, 0xfffff800}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r0) syz_open_pts(0xffffffffffffffff, 0x40000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f000001fa40)=0xfffffffe) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 22.693578915s ago: executing program 3 (id=1139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000300)={0x4000000, 0xffffb1c4, 0xfffff800}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r0) syz_open_pts(0xffffffffffffffff, 0x40000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f000001fa40)=0xfffffffe) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 21.840301368s ago: executing program 1 (id=1143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) 19.969219424s ago: executing program 2 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 16.710943791s ago: executing program 3 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 16.643793442s ago: executing program 2 (id=1149): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) r6 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 16.628414262s ago: executing program 4 (id=1150): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75", 0x2}], 0x1, &(0x7f0000000180)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x85c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES16=r0, @ANYBLOB="0380000000000000240012800c0001006d61080001000800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r5], 0x54}}, 0x0) 15.827215634s ago: executing program 2 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 15.310906511s ago: executing program 4 (id=1153): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75", 0x2}], 0x1, &(0x7f0000000180)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x85c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES16, @ANYBLOB="0380000000000000240012800c0001006d61080001000800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r5], 0x54}}, 0x0) 13.724674193s ago: executing program 1 (id=1154): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000017", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x24000014) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 12.818510216s ago: executing program 2 (id=1156): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x298f3cc22e12b39a, 0x0) write$proc_mixer(r0, 0x0, 0x178) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x11, 0x5514, &(0x7f0000011600)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 11.936872869s ago: executing program 4 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 11.87100989s ago: executing program 1 (id=1158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0x0, "c3e1b7fc", {0x3, 0x100, 0x0, 0x1, 0x6c03, 0x3, 0x1}}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 11.827040461s ago: executing program 5 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 10.50205372s ago: executing program 5 (id=1160): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 10.278694003s ago: executing program 3 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 10.259969263s ago: executing program 5 (id=1162): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000000)={@remote, @multicast, @val={@void, {0x8100, 0x6, 0x1}}, {@generic={0x4305}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x8, 0x4, 0x3, 0x7f}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='&/(\\\xc7*^{@::@([(\x11&\xcb\x00', 0x0, r4) 5.640017529s ago: executing program 5 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 5.005452398s ago: executing program 1 (id=1164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 4.623625954s ago: executing program 3 (id=1165): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) 4.526057595s ago: executing program 2 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75", 0x2}], 0x1, &(0x7f0000000180)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x85c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES16=r0, @ANYBLOB="0380000000000000240012800c0001006d61080001000800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r5], 0x54}}, 0x0) 3.612821628s ago: executing program 5 (id=1167): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2020) r8 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 1.792350455s ago: executing program 5 (id=1168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) 1.743812815s ago: executing program 4 (id=1169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033"], 0x104}}, 0x24000014) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.703990816s ago: executing program 2 (id=1170): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4}}, 0x10, 0x0}, 0x40) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840000000081400058008"], 0x5c}}, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 1.306488011s ago: executing program 4 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 127.562648ms ago: executing program 4 (id=1172): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) pipe2(0x0, 0x800) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x40054) 126.628748ms ago: executing program 1 (id=1173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1ee6, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000001, 0x35f, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) r8 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0) 0s ago: executing program 3 (id=1174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000000)={@remote, @multicast, @val={@void, {0x8100, 0x6, 0x1}}, {@generic={0x4305}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x8, 0x4, 0x3, 0x7f}}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='&/(\\\xc7*^{@::@([(\x11&\xcb\x00', 0x0, r4) kernel console output (not intermixed with test programs): ld fault injection attr: rate: 771, type: 0x1ffff [ 251.347439][ T5551] F2FS-fs (loop3): invalid crc value [ 251.388345][ T5551] F2FS-fs (loop3): Found nat_bits in checkpoint [ 251.443153][ T5551] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.988526][ T5415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.091889][ T5415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.202833][ T5415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.224850][ T5579] loop3: detected capacity change from 0 to 64 [ 253.642028][ T5415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.409656][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.514747][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.531996][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.620948][ T5415] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.075170][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.498963][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.510973][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.518277][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.410529][ T5604] loop2: detected capacity change from 0 to 128 [ 257.683435][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.837511][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.985562][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.995466][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.002562][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.043849][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.199991][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.536821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.453853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.467453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.606714][ T5415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.617209][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.675282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.796945][ T5628] loop2: detected capacity change from 0 to 128 [ 259.984089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.211156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.490323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.512327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.521333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.581008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.609382][ T5621] ceph: No mds server is up or the cluster is laggy [ 260.631579][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 260.649056][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 260.787954][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.794393][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.983826][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.998007][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.252253][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.294446][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 262.664113][ T4233] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 262.672428][ T4233] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 262.672519][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.710611][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.174117][ T5668] loop3: detected capacity change from 0 to 128 [ 263.303168][ T4233] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.349472][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.460220][ T4233] usb 2-1: config 0 has no interface number 0 [ 263.581477][ T4233] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 263.634075][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.642521][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.651033][ T4233] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 263.685603][ T5415] device veth0_vlan entered promiscuous mode [ 263.693153][ T4233] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.705508][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.723749][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.731739][ T4233] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.758265][ T5415] device veth1_vlan entered promiscuous mode [ 263.773620][ T4233] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 263.846440][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.891355][ T4233] usb 2-1: config 0 descriptor?? [ 263.956955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.975624][ T4233] gspca_main: spca561-2.14.0 probing abcd:cdee [ 263.984604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.743231][ T4233] spca561: probe of 2-1:0.156 failed with error -22 [ 264.750958][ T4233] usb 2-1: MIDIStreaming interface descriptor not found [ 265.185783][ T5415] device veth0_macvtap entered promiscuous mode [ 265.323894][ T5415] device veth1_macvtap entered promiscuous mode [ 265.516297][ T4233] usb 2-1: USB disconnect, device number 2 [ 265.559344][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.450311][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.491598][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.502524][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.514197][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.524773][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.564912][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.613293][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.637807][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.530303][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.750645][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.766650][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.779842][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 267.788849][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 267.816331][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 267.863473][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 268.771590][ T5720] loop3: detected capacity change from 0 to 128 [ 268.990557][ T23] libceph: connect (1)[c::]:6789 error -101 [ 269.096482][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 269.127886][ T5707] ceph: No mds server is up or the cluster is laggy [ 269.445168][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.506698][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.715324][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 269.721383][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 269.743098][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.248168][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.281501][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.495391][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.547735][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.609978][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.682060][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.956618][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 270.962699][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 270.971938][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 270.978114][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 270.997300][ T5415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.063168][ T5415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.072103][ T5415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.118522][ T5415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.129695][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.140070][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.407806][ T5753] loop3: detected capacity change from 0 to 128 [ 273.796554][ T5766] loop1: detected capacity change from 0 to 128 [ 275.845836][ T4369] device hsr_slave_0 left promiscuous mode [ 276.074995][ T4369] device hsr_slave_1 left promiscuous mode [ 276.097151][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.750022][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.970464][ T4369] device bridge_slave_1 left promiscuous mode [ 277.191664][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.342071][ T4369] device bridge_slave_0 left promiscuous mode [ 277.358734][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.019062][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 278.067308][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 278.091502][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.112629][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.252378][ T4369] bond0 (unregistering): Released all slaves [ 278.374737][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.420048][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.478368][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.487842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.496905][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.525336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.058150][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.162'. [ 279.068403][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.162'. [ 282.146263][ T5834] loop5: detected capacity change from 0 to 128 [ 283.851013][ T5850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.327'. [ 285.910333][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 285.921210][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 287.693174][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 288.695193][ T5896] loop4: detected capacity change from 0 to 128 [ 288.737806][ T5898] loop3: detected capacity change from 0 to 128 [ 289.674160][ T7] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 289.698559][ T7] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 289.813795][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.853056][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 289.890051][ T7] usb 3-1: config 0 has no interface number 0 [ 290.729374][ T7] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 290.740210][ T7] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 290.751677][ T7] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.763536][ T7] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.823262][ T7] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 290.841902][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.924199][ T7] usb 3-1: config 0 descriptor?? [ 290.963232][ T7] usb 3-1: can't set config #0, error -71 [ 291.002032][ T7] usb 3-1: USB disconnect, device number 4 [ 291.938511][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.344'. [ 291.948927][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.344'. [ 292.637144][ T5927] loop4: detected capacity change from 0 to 128 [ 296.686163][ T5955] loop4: detected capacity change from 0 to 128 [ 297.903133][ T5079] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.323308][ T5079] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 298.382093][ T5079] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 298.515787][ T5079] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.546309][ T5079] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.561932][ T5079] usb 4-1: config 0 has no interface number 0 [ 298.569016][ T5079] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 298.587708][ T5079] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 298.610302][ T5079] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.621092][ T5079] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.634703][ T5079] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 298.644167][ T5079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.690275][ T5079] usb 4-1: config 0 descriptor?? [ 299.023796][ T5079] gspca_main: spca561-2.14.0 probing abcd:cdee [ 299.313544][ T5079] spca561: probe of 4-1:0.156 failed with error -22 [ 299.436828][ T5079] usb 4-1: MIDIStreaming interface descriptor not found [ 299.717341][ T5978] loop2: detected capacity change from 0 to 128 [ 300.012074][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 300.023256][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 300.577654][ T5079] usb 4-1: USB disconnect, device number 4 [ 301.953770][ T5989] loop1: detected capacity change from 0 to 128 [ 302.002591][ T5987] loop3: detected capacity change from 0 to 128 [ 304.389741][ T6012] loop1: detected capacity change from 0 to 128 [ 305.144601][ T6008] binder: 6006:6008 ioctl c0306201 200000000080 returned -14 [ 305.230197][ T6008] binder: 6006:6008 ioctl c0306201 200000000600 returned -14 [ 305.286112][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.467959][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 307.558076][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.367'. [ 308.957447][ T6054] loop2: detected capacity change from 0 to 512 [ 309.035438][ T6054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 309.130389][ T6054] EXT4-fs (loop2): 1 truncate cleaned up [ 309.167372][ T6054] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 311.253095][ T6071] loop4: detected capacity change from 0 to 128 [ 311.294651][ T6073] loop1: detected capacity change from 0 to 128 [ 313.335155][ T6080] loop2: detected capacity change from 0 to 128 [ 314.646128][ T6092] binder: 6091:6092 ioctl c0306201 200000000080 returned -14 [ 314.766914][ T6092] binder: 6091:6092 ioctl c0306201 200000000600 returned -14 [ 315.987586][ T6115] loop3: detected capacity change from 0 to 512 [ 315.995980][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 316.008058][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 316.027250][ T6115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.069948][ T6113] loop4: detected capacity change from 0 to 512 [ 316.279022][ T6113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.973531][ T6130] loop2: detected capacity change from 0 to 128 [ 317.025842][ T6115] EXT4-fs (loop3): 1 truncate cleaned up [ 317.031624][ T6115] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 317.304353][ T6113] EXT4-fs (loop4): 1 truncate cleaned up [ 317.700081][ T6113] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 322.744488][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.750834][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.753148][ T6151] loop2: detected capacity change from 0 to 128 [ 323.195228][ T6156] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.699219][ T6172] loop4: detected capacity change from 0 to 40427 [ 324.928311][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.390'. [ 325.111060][ T6172] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 325.125071][ T6172] F2FS-fs (loop4): invalid crc value [ 325.457814][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 325.472131][ T6172] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.543637][ T6172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.161448][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 326.969059][ T6210] loop5: detected capacity change from 0 to 512 [ 327.055184][ T6210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.184113][ T6210] EXT4-fs (loop5): 1 truncate cleaned up [ 327.202858][ T6210] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 327.904976][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.402'. [ 332.589399][ T6256] loop1: detected capacity change from 0 to 40427 [ 332.769341][ T6256] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 332.780451][ T6256] F2FS-fs (loop1): invalid crc value [ 332.833633][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.411'. [ 333.206101][ T6256] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.321052][ T6256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 339.708761][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 340.628605][ T6330] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 340.798721][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 342.026362][ T6339] loop4: detected capacity change from 0 to 40427 [ 342.105034][ T6343] loop1: detected capacity change from 0 to 512 [ 342.169142][ T6339] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 342.186911][ T6339] F2FS-fs (loop4): invalid crc value [ 342.230649][ T6339] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.362419][ T6352] loop3: detected capacity change from 0 to 512 [ 342.390834][ T6343] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 342.401021][ T6339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 343.461972][ T6343] EXT4-fs (loop1): 1 truncate cleaned up [ 343.485833][ T6343] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 343.486875][ T6352] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.644876][ T6352] EXT4-fs (loop3): 1 truncate cleaned up [ 343.700750][ T6352] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 345.531979][ T6376] loop2: detected capacity change from 0 to 512 [ 345.701735][ T6376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.876760][ T6376] EXT4-fs (loop2): 1 truncate cleaned up [ 345.892921][ T6376] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 345.961627][ T6383] loop4: detected capacity change from 0 to 512 [ 346.027366][ T6383] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 346.898372][ T6383] EXT4-fs (loop4): 1 truncate cleaned up [ 346.973082][ T6383] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 347.995532][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 348.001605][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 348.384647][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 348.391543][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 348.787630][ T6408] ceph: No mds server is up or the cluster is laggy [ 349.210602][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 349.244715][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 349.250780][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 349.396576][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 350.333651][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 350.818304][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 351.569032][ T6444] binder: 6440:6444 ioctl c0306201 200000000080 returned -14 [ 351.620784][ T6447] loop1: detected capacity change from 0 to 512 [ 351.638287][ T6442] loop3: detected capacity change from 0 to 512 [ 351.676835][ T6444] binder: 6440:6444 ioctl c0306201 200000000600 returned -14 [ 351.803332][ T6447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 351.813921][ T6442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.847371][ T6442] EXT4-fs (loop3): 1 truncate cleaned up [ 351.855627][ T6447] EXT4-fs (loop1): 1 truncate cleaned up [ 351.861316][ T6447] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 351.883159][ T6442] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 352.113119][ T5545] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 353.213351][ T5545] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 353.232098][ T5545] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 353.272763][ T5545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.293053][ T5545] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.169137][ T5545] usb 3-1: config 0 has no interface number 0 [ 355.176226][ T5545] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 355.186419][ T5545] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 355.197647][ T5545] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.207732][ T5545] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.221167][ T5545] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 355.241174][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 355.261446][ T5545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.334425][ T5545] usb 3-1: config 0 descriptor?? [ 355.403329][ T5545] usb 3-1: can't set config #0, error -71 [ 355.416932][ T5545] usb 3-1: USB disconnect, device number 5 [ 355.711847][ T6489] loop5: detected capacity change from 0 to 40427 [ 355.812041][ T6489] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 355.826094][ T6489] F2FS-fs (loop5): invalid crc value [ 355.833480][ T4295] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 355.842545][ T4295] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 355.861117][ T4295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.874609][ T6489] F2FS-fs (loop5): Found nat_bits in checkpoint [ 355.899768][ T4295] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.912467][ T4295] usb 5-1: config 0 has no interface number 0 [ 355.932237][ T6489] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 355.935067][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 355.969991][ T6499] loop3: detected capacity change from 0 to 128 [ 356.021371][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 356.096965][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.174383][ T4295] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.246710][ T4295] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 356.279583][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.462236][ T4295] usb 5-1: config 0 descriptor?? [ 356.579367][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.457'. [ 357.177359][ T4295] usb 5-1: can't set config #0, error -71 [ 357.184945][ T4295] usb 5-1: USB disconnect, device number 3 [ 357.206407][ T6507] binder: 6506:6507 ioctl c0306201 200000000080 returned -14 [ 357.297111][ T6507] binder: 6506:6507 ioctl c0306201 200000000600 returned -14 [ 358.071732][ T6517] loop2: detected capacity change from 0 to 512 [ 358.505881][ T6517] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.730719][ T6517] EXT4-fs (loop2): 1 truncate cleaned up [ 358.775408][ T6517] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x000000000000007c,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 358.921987][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.458'. [ 358.943031][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.458'. [ 359.906265][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 360.229224][ T5079] Bluetooth: hci3: command 0x0406 tx timeout [ 360.473169][ T4295] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 360.481475][ T4295] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 360.599846][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.5.463'. [ 361.147505][ T4295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.251904][ T4295] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 361.261305][ T4295] usb 5-1: config 0 has no interface number 0 [ 361.273114][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 361.283167][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 361.303093][ T4295] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 361.347543][ T6541] loop3: detected capacity change from 0 to 128 [ 361.348797][ T4295] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.392520][ T4295] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 361.413364][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.434835][ T4295] usb 5-1: config 0 descriptor?? [ 361.475954][ T4295] gspca_main: spca561-2.14.0 probing abcd:cdee [ 362.593655][ T6555] loop4: detected capacity change from 0 to 40427 [ 362.651828][ T6555] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 362.663509][ T4295] spca561: probe of 5-1:0.156 failed with error -22 [ 362.674747][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 362.693649][ T6555] F2FS-fs (loop4): invalid crc value [ 362.901746][ T4295] usb 5-1: MIDIStreaming interface descriptor not found [ 362.922325][ T4295] usb 5-1: USB disconnect, device number 4 [ 362.923727][ T6555] F2FS-fs (loop4): Found nat_bits in checkpoint [ 363.080929][ T6555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 363.433848][ T4231] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 363.539735][ T4231] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 364.237207][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.337078][ T4231] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 364.346140][ T4231] usb 6-1: config 0 has no interface number 0 [ 364.352295][ T4231] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 364.362294][ T4231] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 364.373360][ T4231] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.383238][ T4231] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.396857][ T4231] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 364.405965][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.438514][ T4231] usb 6-1: config 0 descriptor?? [ 364.568498][ T6573] loop1: detected capacity change from 0 to 40427 [ 364.583471][ T4231] usb 6-1: can't set config #0, error -71 [ 364.601407][ T4231] usb 6-1: USB disconnect, device number 2 [ 364.847205][ T6573] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 364.864024][ T6573] F2FS-fs (loop1): invalid crc value [ 364.991964][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.139312][ T6573] F2FS-fs (loop1): Found nat_bits in checkpoint [ 365.427330][ T6573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 367.362137][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.477'. [ 369.383561][ T4232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 370.073441][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 370.194967][ T6637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.333229][ T4232] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 370.348367][ T4232] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 370.357274][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.368836][ T4232] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 370.390005][ T4232] usb 4-1: config 0 has no interface number 0 [ 370.479098][ T4232] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 371.183261][ T4232] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 371.203033][ T4232] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.243086][ T4232] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.308375][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 371.338399][ T4232] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 371.374829][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.456235][ T4232] usb 4-1: config 0 descriptor?? [ 371.572315][ T4232] gspca_main: spca561-2.14.0 probing abcd:cdee [ 372.455159][ T6660] loop4: detected capacity change from 0 to 40427 [ 372.462185][ T4232] spca561: probe of 4-1:0.156 failed with error -22 [ 372.469932][ T4232] usb 4-1: MIDIStreaming interface descriptor not found [ 372.487761][ T4232] usb 4-1: USB disconnect, device number 5 [ 372.613680][ T6660] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 372.624445][ T6660] F2FS-fs (loop4): invalid crc value [ 372.726451][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.5.491'. [ 373.169674][ T6660] F2FS-fs (loop4): Found nat_bits in checkpoint [ 373.223344][ T6660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 373.492236][ T5266] udevd[5266]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.092103][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.497'. [ 376.203333][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.304879][ T6706] device macvlan2 entered promiscuous mode [ 377.881578][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.500'. [ 382.854430][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.504'. [ 383.845214][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.851557][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.551336][ T6768] loop3: detected capacity change from 0 to 128 [ 385.723146][ T4174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 386.473287][ T4174] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 386.495264][ T4174] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 386.543367][ T4174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.594568][ T4174] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 386.614505][ T4174] usb 2-1: config 0 has no interface number 0 [ 386.633241][ T4174] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 386.663103][ T4174] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 386.684439][ T4174] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.704777][ T4174] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.769460][ T4174] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 386.800296][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.852059][ T4174] usb 2-1: config 0 descriptor?? [ 386.915812][ T4174] gspca_main: spca561-2.14.0 probing abcd:cdee [ 387.303924][ T4174] spca561: probe of 2-1:0.156 failed with error -22 [ 387.328414][ T4174] usb 2-1: MIDIStreaming interface descriptor not found [ 388.675872][ T4174] usb 2-1: USB disconnect, device number 3 [ 389.695229][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.213293][ T4295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 392.283500][ T4295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 392.383655][ T6818] loop5: detected capacity change from 0 to 128 [ 393.135000][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.143959][ T4295] usb 2-1: Product: syz [ 393.148444][ T4295] usb 2-1: Manufacturer: syz [ 393.153502][ T4295] usb 2-1: SerialNumber: syz [ 393.192882][ T6817] 9pnet: Insufficient options for proto=fd [ 393.225466][ T4295] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 393.647056][ T6824] loop4: detected capacity change from 0 to 40427 [ 393.697647][ T6822] loop2: detected capacity change from 0 to 128 [ 393.723972][ T6824] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 393.769252][ T6824] F2FS-fs (loop4): invalid crc value [ 393.795207][ T6824] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.857533][ T6824] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.883122][ T6741] usb 2-1: USB disconnect, device number 4 [ 393.883132][ T5545] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 394.158194][ T6741] usb 2-1: ath9k_htc: USB layer deinitialized [ 396.094792][ T6849] loop3: detected capacity change from 0 to 128 [ 396.954584][ T6849] 9pnet: Insufficient options for proto=fd [ 397.335048][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'. [ 398.281434][ T6865] loop4: detected capacity change from 0 to 128 [ 398.710340][ T6867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.536'. [ 399.284294][ T6868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.535'. [ 399.751585][ T6865] 9pnet: Insufficient options for proto=fd [ 400.513108][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 400.809996][ T6877] loop1: detected capacity change from 0 to 40427 [ 400.867194][ T6877] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 400.877310][ T6877] F2FS-fs (loop1): invalid crc value [ 400.941513][ T6877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 400.976711][ T6877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 401.225196][ T6886] loop2: detected capacity change from 0 to 128 [ 402.013879][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 402.037999][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.080440][ T7] usb 5-1: Product: syz [ 402.096389][ T7] usb 5-1: Manufacturer: syz [ 402.101048][ T7] usb 5-1: SerialNumber: syz [ 402.144612][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 402.193964][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 402.703297][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 403.266065][ T4295] usb 5-1: USB disconnect, device number 5 [ 403.283103][ T7] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 403.293756][ T4295] usb 5-1: ath9k_htc: USB layer deinitialized [ 403.655601][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.546'. [ 404.420927][ T4232] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 404.553408][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 404.565359][ T4232] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 404.578523][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.588895][ T4232] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.869647][ T4232] usb 3-1: config 0 has no interface number 0 [ 404.876508][ T4232] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 404.886849][ T4232] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 404.902142][ T4232] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.912108][ T4232] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.926181][ T4232] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 404.936144][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.948817][ T4232] usb 3-1: config 0 descriptor?? [ 404.964882][ T4231] Bluetooth: hci3: command 0x0405 tx timeout [ 405.135270][ T4232] gspca_main: spca561-2.14.0 probing abcd:cdee [ 405.213902][ T6916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.549'. [ 405.583290][ T7] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 405.693161][ T7] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 405.723265][ T4232] spca561: probe of 3-1:0.156 failed with error -22 [ 405.743645][ T4232] usb 3-1: MIDIStreaming interface descriptor not found [ 405.780899][ T4232] usb 3-1: USB disconnect, device number 6 [ 405.869042][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.892828][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 405.907381][ T7] usb 4-1: config 0 has no interface number 0 [ 405.914784][ T7] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 405.943266][ T7] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 407.117938][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.219907][ T7] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 407.229864][ T7] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.243011][ T7] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 407.252081][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.279966][ T7] usb 4-1: config 0 descriptor?? [ 407.363166][ T7] usb 4-1: can't set config #0, error -71 [ 407.382347][ T7] usb 4-1: USB disconnect, device number 6 [ 407.602590][ T6927] loop4: detected capacity change from 0 to 40427 [ 408.364214][ T6927] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 408.375365][ T6927] F2FS-fs (loop4): invalid crc value [ 408.422772][ T6927] F2FS-fs (loop4): Found nat_bits in checkpoint [ 408.459046][ T6927] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 408.835442][ T6938] loop3: detected capacity change from 0 to 128 [ 408.994482][ T6944] loop2: detected capacity change from 0 to 128 [ 412.344504][ T6959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.559'. [ 414.119344][ T6968] fuse: Bad value for 'fd' [ 414.393118][ T5079] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 414.734589][ T6978] loop5: detected capacity change from 0 to 128 [ 415.523256][ T5079] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 415.534767][ T5079] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 415.553820][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 415.589018][ T5079] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.681641][ T5079] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 415.725035][ T5079] usb 5-1: config 0 has no interface number 0 [ 415.773026][ T5079] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 415.831560][ T5079] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 415.844515][ T5079] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 415.973862][ T5079] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.973923][ T5079] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 415.973954][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.982285][ T5079] usb 5-1: config 0 descriptor?? [ 416.047743][ T5079] gspca_main: spca561-2.14.0 probing abcd:cdee [ 416.148238][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.566'. [ 416.763663][ T6996] loop1: detected capacity change from 0 to 128 [ 417.503180][ T5079] spca561: probe of 5-1:0.156 failed with error -22 [ 417.510424][ T5079] usb 5-1: MIDIStreaming interface descriptor not found [ 417.652696][ T5079] usb 5-1: USB disconnect, device number 6 [ 418.081651][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 418.092565][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 419.818623][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.954018][ T7017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.574'. [ 420.721353][ T7024] fuse: Bad value for 'fd' [ 420.916104][ T7029] loop3: detected capacity change from 0 to 128 [ 423.325618][ T7037] loop4: detected capacity change from 0 to 128 [ 425.136378][ T7062] loop3: detected capacity change from 0 to 128 [ 425.301179][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.581'. [ 427.723116][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 427.933182][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 432.203843][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 439.544796][ T7146] loop4: detected capacity change from 0 to 128 [ 440.485923][ T7149] loop5: detected capacity change from 0 to 128 [ 441.561613][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 442.351574][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 445.106496][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.112998][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.937273][ T7194] loop2: detected capacity change from 0 to 40427 [ 446.993882][ T7194] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 447.022495][ T7194] F2FS-fs (loop2): invalid crc value [ 447.469098][ T7194] F2FS-fs (loop2): Found nat_bits in checkpoint [ 447.537327][ T7194] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 447.818457][ T7211] loop3: detected capacity change from 0 to 128 [ 449.654367][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 449.709038][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 450.818310][ T7230] loop3: detected capacity change from 0 to 128 [ 452.933130][ T5647] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 453.323154][ T5647] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 453.343188][ T5647] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 453.372881][ T5647] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.390666][ T5647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.919936][ T7258] loop1: detected capacity change from 0 to 128 [ 455.958305][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 455.972360][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 459.177606][ T4294] usb 6-1: USB disconnect, device number 3 [ 460.668764][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 460.685718][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 460.843425][ T7307] loop4: detected capacity change from 0 to 128 [ 465.684209][ T7320] netlink: 192 bytes leftover after parsing attributes in process `syz.4.653'. [ 468.003918][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 468.144667][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 470.871144][ T7366] binder: 7364:7366 ioctl c0306201 200000000080 returned -14 [ 471.881873][ T7366] binder: 7364:7366 ioctl c0306201 200000000600 returned -11 [ 472.873065][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 473.046514][ T7381] loop5: detected capacity change from 0 to 128 [ 475.413164][ T21] usb 2-1: device descriptor read/all, error -71 [ 475.644844][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 475.656019][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 478.099887][ T7412] binder: 7411:7412 ioctl c0306201 200000000080 returned -14 [ 478.174394][ T7412] binder: 7411:7412 ioctl c0306201 200000000600 returned -11 [ 480.788077][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 483.400412][ T7477] loop5: detected capacity change from 0 to 128 [ 484.305497][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 484.333953][ T7488] binder: 7487:7488 ioctl c0306201 200000000080 returned -14 [ 484.349166][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 484.370221][ T7481] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 484.378637][ T7488] binder: 7487:7488 ioctl c0306201 200000000600 returned -14 [ 484.569841][ T7493] binder: 7492:7493 ioctl c0306201 200000000080 returned -14 [ 485.059284][ T7493] binder: 7492:7493 ioctl c0306201 200000000600 returned -14 [ 488.478573][ T7518] loop3: detected capacity change from 0 to 128 [ 489.516947][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 489.528568][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 494.808629][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 494.943171][ T7358] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 495.019459][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'. [ 495.886309][ T7358] usb 6-1: device descriptor read/64, error -71 [ 496.044797][ T7579] loop4: detected capacity change from 0 to 128 [ 497.695600][ T7358] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 502.560336][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 502.705266][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 504.809365][ T7633] loop4: detected capacity change from 0 to 128 [ 505.616535][ T7636] netlink: 192 bytes leftover after parsing attributes in process `syz.3.748'. [ 505.665639][ T7639] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 505.915901][ T4231] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 506.545584][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.551991][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.722325][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 506.736441][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 508.273276][ T4231] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 508.851446][ T4231] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 508.970865][ T4231] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 510.002194][ T4231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 510.011586][ T4231] usb 5-1: config 0 has no interface number 0 [ 510.018863][ T4231] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 510.029635][ T4231] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 510.041314][ T4231] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.051788][ T4231] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.065538][ T4231] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 510.075195][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.086534][ T4231] usb 5-1: config 0 descriptor?? [ 510.103440][ T4231] usb 5-1: can't set config #0, error -71 [ 510.448646][ T7684] loop4: detected capacity change from 0 to 128 [ 511.331109][ T7598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 511.332238][ T4231] usb 5-1: USB disconnect, device number 7 [ 511.354839][ T7598] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 512.649262][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'. [ 512.703107][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'. [ 512.843179][ T4231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 513.083164][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 513.725134][ T4231] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 513.768518][ T4231] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 513.816564][ T4231] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 513.848152][ T4231] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 513.892119][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.163256][ T4231] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 516.062288][ T4231] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 516.077378][ T4231] usb 5-1: Product: syz [ 516.082763][ T4231] usb 5-1: Manufacturer: syz [ 516.092545][ T4231] usb 5-1: config 0 descriptor?? [ 516.113154][ T4231] usb 5-1: can't set config #0, error -71 [ 516.123314][ T4231] usb 5-1: USB disconnect, device number 8 [ 517.763686][ T7732] loop2: detected capacity change from 0 to 128 [ 518.565995][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 518.575998][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'. [ 519.261399][ T7598] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 520.193044][ T7598] usb 2-1: Using ep0 maxpacket: 32 [ 520.344255][ T7598] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 521.113322][ T7598] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 521.411820][ T7598] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 521.423409][ T7598] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 521.437936][ T7598] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.647437][ T7598] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 521.673050][ T7598] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 521.773025][ T7598] usb 2-1: Product: syz [ 521.778062][ T7598] usb 2-1: Manufacturer: syz [ 521.783382][ T7598] usb 2-1: SerialNumber: syz [ 521.793747][ T7598] usb 2-1: config 0 descriptor?? [ 521.974881][ T7598] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 521.999482][ T7598] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 522.009808][ T7598] usb 2-1: USB disconnect, device number 7 [ 522.022289][ T7598] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 522.440328][ T7776] loop1: detected capacity change from 0 to 128 [ 523.365612][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 523.409839][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 528.125865][ T7816] loop1: detected capacity change from 0 to 128 [ 528.206233][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 528.303080][ T4246] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 529.083181][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 529.213525][ T4246] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 529.233107][ T23] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 529.273038][ T4246] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 529.283780][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 529.326177][ T4246] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 529.338177][ T23] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 529.357698][ T4246] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.470329][ T23] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 529.483823][ T4246] usb 3-1: config 0 has no interface number 0 [ 529.489951][ T4246] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 529.764797][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 529.771549][ T4246] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 529.793112][ T4246] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.813193][ T4246] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.826988][ T4246] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 529.836942][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.847228][ T4246] usb 3-1: config 0 descriptor?? [ 529.895643][ T4246] gspca_main: spca561-2.14.0 probing abcd:cdee [ 529.923225][ T23] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 529.936723][ T23] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 529.953035][ T23] usb 5-1: Product: syz [ 529.957400][ T23] usb 5-1: Manufacturer: syz [ 529.962006][ T23] usb 5-1: SerialNumber: syz [ 530.071694][ T7828] loop3: detected capacity change from 0 to 128 [ 530.094216][ T23] usb 5-1: config 0 descriptor?? [ 530.873266][ T23] usb 5-1: can't set config #0, error -71 [ 530.912208][ T23] usb 5-1: USB disconnect, device number 9 [ 530.918370][ T4246] spca561: probe of 3-1:0.156 failed with error -22 [ 530.936472][ T4246] usb 3-1: MIDIStreaming interface descriptor not found [ 531.154726][ T4246] usb 3-1: USB disconnect, device number 8 [ 531.530270][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.917558][ T7859] loop4: detected capacity change from 0 to 128 [ 534.753039][ T4295] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 534.918165][ T7865] loop5: detected capacity change from 0 to 128 [ 535.943141][ T4295] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.987507][ T4295] usb 2-1: config 1 interface 0 has no altsetting 0 [ 536.243771][ T4295] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 536.267975][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.292982][ T4295] usb 2-1: Product: syz [ 536.306226][ T4295] usb 2-1: Manufacturer: syz [ 536.326135][ T4295] usb 2-1: SerialNumber: syz [ 536.696683][ T4295] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 536.852783][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 536.862314][ T4295] usb 2-1: USB disconnect, device number 8 [ 536.879459][ T3546] pxrc 2-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 536.962719][ T7871] loop5: detected capacity change from 0 to 40427 [ 537.038456][ T7871] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 537.435151][ T7871] F2FS-fs (loop5): invalid crc value [ 537.873675][ T7880] loop2: detected capacity change from 0 to 128 [ 537.891707][ T7871] F2FS-fs (loop5): Found nat_bits in checkpoint [ 538.054761][ T7871] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 538.432996][ T4295] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 540.043194][ T4295] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 540.051511][ T4295] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 540.906555][ T4295] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 540.920934][ T4295] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 540.931564][ T4295] usb 2-1: config 0 has no interface number 0 [ 540.938562][ T4295] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 540.948787][ T4295] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 540.960214][ T4295] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.975197][ T4295] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.988707][ T4295] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 540.998201][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.018639][ T4295] usb 2-1: config 0 descriptor?? [ 541.043111][ T4295] usb 2-1: can't set config #0, error -71 [ 541.060221][ T4295] usb 2-1: USB disconnect, device number 9 [ 542.673590][ T7918] loop4: detected capacity change from 0 to 128 [ 544.445062][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 545.033321][ T23] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 545.373070][ T23] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 545.475137][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.668032][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 545.668464][ T23] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 545.694224][ T23] usb 6-1: config 0 has no interface number 0 [ 545.700457][ T23] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 545.714700][ T23] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 545.729828][ T23] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 546.525110][ T23] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.539014][ T23] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 546.548839][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.563961][ T23] usb 6-1: config 0 descriptor?? [ 546.583098][ T23] usb 6-1: can't set config #0, error -71 [ 546.590941][ T23] usb 6-1: USB disconnect, device number 6 [ 546.676829][ T7938] loop5: detected capacity change from 0 to 256 [ 546.683216][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 546.753712][ T7938] ======================================================= [ 546.753712][ T7938] WARNING: The mand mount option has been deprecated and [ 546.753712][ T7938] and is ignored by this kernel. Remove the mand [ 546.753712][ T7938] option from the mount to silence this warning. [ 546.753712][ T7938] ======================================================= [ 546.943019][ T4233] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 546.984034][ T7948] input: syz1 as /devices/virtual/input/input6 [ 547.053326][ T7944] loop2: detected capacity change from 0 to 2048 [ 547.138769][ T7944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.323844][ T4233] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 547.359579][ T4233] usb 5-1: config 1 interface 0 has no altsetting 0 [ 547.403377][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 547.553216][ T4233] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 547.572818][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.573331][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 547.590854][ T4233] usb 5-1: Product: syz [ 547.595627][ T4233] usb 5-1: Manufacturer: syz [ 547.603222][ T4233] usb 5-1: SerialNumber: syz [ 547.698900][ T7957] loop3: detected capacity change from 0 to 1024 [ 547.747676][ T7957] EXT4-fs (loop3): Ignoring removed oldalloc option [ 547.766516][ T7957] EXT4-fs (loop3): Ignoring removed orlov option [ 547.796352][ T7957] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 547.833361][ T2301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 547.893526][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 547.990216][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 548.002327][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 548.011570][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.023155][ T23] usb 2-1: config 0 descriptor?? [ 548.028335][ T13] usb 6-1: config 28 has an invalid interface number: 169 but max is 0 [ 548.040517][ T13] usb 6-1: config 28 has no interface number 0 [ 548.047193][ T13] usb 6-1: config 28 interface 169 has no altsetting 0 [ 548.056408][ T4233] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 548.103160][ T2301] usb 3-1: Using ep0 maxpacket: 16 [ 548.123308][ T13] usb 6-1: string descriptor 0 read error: -71 [ 548.130878][ T13] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 548.145995][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.170603][ T4233] usb 5-1: USB disconnect, device number 10 [ 548.206557][ T13] r8152-cfgselector 6-1: rejected 1 configuration due to insufficient available bus power [ 548.216711][ T13] r8152-cfgselector 6-1: no configuration chosen from 1 choice [ 548.243597][ T2301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.254846][ T13] r8152-cfgselector 6-1: Unknown version 0x0000 [ 548.269481][ T13] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 548.277223][ T2301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.309148][ T2301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 548.327181][ T2301] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 548.336945][ T2301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.348752][ T2301] usb 3-1: config 0 descriptor?? [ 548.399379][ T7966] syz.3.847 uses obsolete (PF_INET,SOCK_PACKET) [ 548.491012][ T7966] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 548.507515][ T23] logitech 0003:046D:CA03.0002: unbalanced delimiter at end of report description [ 548.525517][ T23] logitech 0003:046D:CA03.0002: parse failed [ 548.542112][ T23] logitech: probe of 0003:046D:CA03.0002 failed with error -22 [ 548.566837][ T7966] kvm: pic: non byte read [ 548.584003][ T7966] kvm: pic: level sensitive irq not supported [ 548.584164][ T7966] kvm: pic: non byte read [ 548.609397][ T7966] kvm: pic: level sensitive irq not supported [ 548.609510][ T7966] kvm: pic: non byte read [ 548.625791][ T7966] kvm: pic: level sensitive irq not supported [ 548.625888][ T7966] kvm: pic: non byte read [ 548.716864][ T7951] loop1: detected capacity change from 0 to 512 [ 548.842451][ T7980] loop5: detected capacity change from 0 to 256 [ 548.851369][ T7951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.865861][ T2301] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 548.882523][ T7951] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 548.903534][ T7951] EXT4-fs (loop1): 1 truncate cleaned up [ 548.914075][ T7951] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,bsddf,quota,,errors=continue. Quota mode: writeback. [ 549.005910][ T4174] usb 2-1: USB disconnect, device number 10 [ 549.055048][ T7980] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 549.068518][ T2301] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 549.133129][ T7980] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 549.140158][ T2301] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 549.195619][ T7980] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 549.208349][ T2301] microsoft 0003:045E:07DA.0003: no inputs found [ 549.244295][ T2301] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 549.280423][ T2301] usb 3-1: USB disconnect, device number 9 [ 549.486317][ T7987] loop3: detected capacity change from 0 to 1024 [ 549.527586][ T7985] fido_id[7985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 550.079163][ T8003] loop1: detected capacity change from 0 to 512 [ 550.146420][ T8003] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 550.158428][ T8009] loop2: detected capacity change from 0 to 128 [ 550.311594][ T8009] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.372837][ T8003] EXT4-fs (loop1): 1 orphan inode deleted [ 550.403212][ T8009] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 550.458732][ T8003] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nodiscard,delalloc,nodiscard,grpid,nodelalloc,sysvgroups,grpjquota=,usrquota,,errors=continue. Quota mode: writeback. [ 550.608028][ T8003] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.847628][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 551.263113][ T26] audit: type=1800 audit(1752040678.454:2): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.862" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 551.726359][ T8028] loop2: detected capacity change from 0 to 512 [ 551.738969][ T8030] loop1: detected capacity change from 0 to 512 [ 551.783288][ T8028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 551.800294][ T8028] EXT4-fs (loop2): 1 truncate cleaned up [ 551.806609][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 551.814643][ T8028] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002a,min_batch_time=0x0000000000000003,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,nojournal_checksum,. Quota mode: none. [ 551.904122][ T8028] EXT4-fs error (device loop2): swap_inode_boot_loader:128: inode #5: comm syz.2.878: iget: bad extra_isize 42 (inode size 256) [ 551.936555][ T8028] EXT4-fs (loop2): Remounting filesystem read-only [ 552.033377][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.050162][ T13] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 552.053360][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 552.096770][ T8037] loop2: detected capacity change from 0 to 1024 [ 552.153295][ T13] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.170248][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 552.178674][ T13] usb 6-1: SerialNumber: syz [ 552.183525][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.214234][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.237212][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.256593][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.270798][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.284283][ T23] usb 5-1: config 0 descriptor?? [ 552.344758][ T8039] loop2: detected capacity change from 0 to 164 [ 552.439007][ T8039] Unable to read rock-ridge attributes [ 552.458726][ T8039] Unable to read rock-ridge attributes [ 552.524175][ T13] usb 6-1: bad CDC descriptors [ 552.544917][ T13] usb 6-1: USB disconnect, device number 8 [ 552.765415][ T23] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 553.564859][ T8056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.903336][ T8056] kvm [8048]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x676e6972747300c0 [ 555.716092][ T23] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 555.785285][ T4233] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 556.151108][ T23] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 556.164200][ T23] microsoft 0003:045E:07DA.0004: no inputs found [ 556.170862][ T23] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 556.354582][ T23] usb 5-1: USB disconnect, device number 11 [ 556.444332][ T8069] capability: warning: `syz.3.882' uses deprecated v2 capabilities in a way that may be insecure [ 556.576674][ T8072] loop2: detected capacity change from 0 to 2048 [ 556.712264][ T8074] fido_id[8074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 556.740666][ T8079] loop5: detected capacity change from 0 to 512 [ 556.760112][ T8081] loop3: detected capacity change from 0 to 512 [ 556.823595][ T8072] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 556.831717][ T8072] UDF-fs: Scanning with blocksize 512 failed [ 556.842671][ T8081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 556.863004][ T4233] usb 2-1: device descriptor read/64, error -71 [ 557.133137][ T4233] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 557.151423][ T8072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.197370][ T8079] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 557.226920][ T8081] EXT4-fs (loop3): 1 truncate cleaned up [ 557.289188][ T8081] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 557.573009][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 557.598141][ T8081] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.887: iget: bad i_size value: 5497558147880 [ 557.623268][ T8079] EXT4-fs (loop5): Ignoring removed bh option [ 557.629519][ T8079] EXT4-fs (loop5): re-mounted. Opts: usrjquota=t,nodelalloc,jqfmt=vfsold,bh,block_validity,quota,. Quota mode: writeback. [ 557.693147][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.704502][ T26] audit: type=1800 audit(1752040684.924:3): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.887" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 557.766134][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.799164][ T4233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.896103][ T8072] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+133753856 [ 557.921766][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.978627][ T8095] loop5: detected capacity change from 0 to 256 [ 558.003647][ T8095] exfat: Unknown parameter 'ÿÿÿÿ0x0000000000000000' [ 558.043699][ T4233] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 558.063216][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 558.100141][ T4233] usb 2-1: Product: syz [ 558.109624][ T4233] usb 2-1: Manufacturer: syz [ 558.126753][ T4233] usb 2-1: SerialNumber: syz [ 558.209409][ T4371] attempt to access beyond end of device [ 558.209409][ T4371] loop2: rw=1, want=2050, limit=2048 [ 558.224539][ T4233] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 558.302956][ T7358] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 558.484150][ T13] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 558.602143][ T4371] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 558.773405][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 558.804061][ T7358] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 558.832097][ T4233] usb 2-1: USB disconnect, device number 12 [ 558.925042][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.986442][ T7358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.256568][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.280914][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.313085][ T4371] attempt to access beyond end of device [ 559.313085][ T4371] loop2: rw=1, want=2050, limit=2048 [ 559.365166][ T4371] Buffer I/O error on dev loop2, logical block 1024, lost async page write [ 559.375348][ T13] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 559.421004][ T4371] attempt to access beyond end of device [ 559.421004][ T4371] loop2: rw=1, want=2052, limit=2048 [ 559.452482][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.472541][ T8106] loop1: detected capacity change from 0 to 128 [ 559.502179][ T4371] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 559.517033][ T7358] usb 4-1: config 0 has no interface number 0 [ 559.526187][ T7358] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 559.537371][ T7358] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 559.547691][ T7358] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.548099][ T13] usb 6-1: config 0 descriptor?? [ 559.560749][ T7358] usb 4-1: config 0 interface 52 has no altsetting 0 [ 559.569947][ T4371] attempt to access beyond end of device [ 559.569947][ T4371] loop2: rw=1, want=2052, limit=2048 [ 559.585532][ T4371] Buffer I/O error on dev loop2, logical block 1025, lost async page write [ 559.597070][ T4233] appletouch 2-1:1.0: input: appletouch disconnected [ 559.613730][ T4371] attempt to access beyond end of device [ 559.613730][ T4371] loop2: rw=1, want=2054, limit=2048 [ 559.624782][ T4371] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 559.634138][ T7358] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 559.643572][ T4371] attempt to access beyond end of device [ 559.643572][ T4371] loop2: rw=1, want=2054, limit=2048 [ 559.655518][ T7358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 559.668848][ T4371] Buffer I/O error on dev loop2, logical block 1026, lost async page write [ 559.679317][ T7358] usb 4-1: SerialNumber: syz [ 559.687201][ T8106] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.688735][ T7358] usb 4-1: config 0 descriptor?? [ 559.698350][ T8106] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 559.723150][ T4371] attempt to access beyond end of device [ 559.723150][ T4371] loop2: rw=1, want=2056, limit=2048 [ 559.741250][ T8106] syz.1.895 (pid 8106) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 559.756720][ T8113] loop4: detected capacity change from 0 to 16 [ 559.766413][ T4371] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 559.786980][ T4371] attempt to access beyond end of device [ 559.786980][ T4371] loop2: rw=1, want=2056, limit=2048 [ 559.798736][ T4371] Buffer I/O error on dev loop2, logical block 1027, lost async page write [ 559.807689][ T4371] attempt to access beyond end of device [ 559.807689][ T4371] loop2: rw=1, want=2058, limit=2048 [ 559.836926][ T4371] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 559.842745][ T8113] erofs: (device loop4): mounted with root inode @ nid 36. [ 559.846899][ T4371] attempt to access beyond end of device [ 559.846899][ T4371] loop2: rw=1, want=2058, limit=2048 [ 559.903200][ T4371] Buffer I/O error on dev loop2, logical block 1028, lost async page write [ 560.051182][ T7358] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 560.072757][ T7358] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 560.120581][ T13] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 560.159267][ T8106] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 560.233882][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 560.343707][ T13] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 560.365381][ T13] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 560.378373][ T13] microsoft 0003:045E:07DA.0005: no inputs found [ 560.386689][ T13] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 560.413953][ T13] usb 6-1: USB disconnect, device number 9 [ 560.471101][ T8136] loop1: detected capacity change from 0 to 2048 [ 560.600259][ T8136] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 560.608239][ T8136] UDF-fs: Scanning with blocksize 512 failed [ 560.630751][ T8136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.856994][ T4233] usb 4-1: USB disconnect, device number 7 [ 561.445531][ T8139] fido_id[8139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 561.615358][ T8145] loop4: detected capacity change from 0 to 8 [ 561.631870][ T8136] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134220898 lbcount: 134222848 extent 0+133753856 [ 561.706357][ T8145] SQUASHFS error: lzo decompression failed, data probably corrupt [ 561.721241][ T8145] SQUASHFS error: Failed to read block 0x28d: -5 [ 561.758057][ T8152] loop3: detected capacity change from 0 to 128 [ 561.873593][ T8145] SQUASHFS error: Unable to read metadata cache entry [28b] [ 561.991373][ T8145] SQUASHFS error: Unable to read inode 0x11f [ 561.993013][ T4295] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 562.326059][ T8152] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 562.387100][ T8145] loop2: detected capacity change from 0 to 7 [ 562.394395][ T8152] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 562.406485][ T8145] loop2: [ 562.426353][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.440171][ T8145] loop2: partition table partially beyond EOD, truncated [ 562.454856][ T8160] loop1: detected capacity change from 0 to 128 [ 562.523617][ T8160] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 562.593204][ T8162] loop4: detected capacity change from 0 to 512 [ 562.643139][ T4295] usb 3-1: Using ep0 maxpacket: 32 [ 562.746963][ T8162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 562.772823][ T8162] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.784333][ T4295] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 562.792577][ T4295] usb 3-1: config 0 has no interface number 0 [ 562.793420][ T26] audit: type=1800 audit(1752040690.014:4): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.911" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 562.840600][ T4295] usb 3-1: config 0 interface 110 has no altsetting 0 [ 563.053321][ T7] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 563.073538][ T4295] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=d7.20 [ 563.075756][ T8179] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 563.086409][ T8178] syz.4.915[8178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.102131][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.129840][ T8178] syz.4.915[8178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.133137][ T4295] usb 3-1: Product: syz [ 563.159348][ T4295] usb 3-1: Manufacturer: syz [ 563.166829][ T4295] usb 3-1: SerialNumber: syz [ 563.176352][ T4295] usb 3-1: config 0 descriptor?? [ 563.280806][ T26] audit: type=1326 audit(1752040690.504:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.4.920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb475f48929 code=0x0 [ 563.323208][ T5545] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 563.484805][ T4295] keyspan 3-1:0.110: Keyspan 1 port adapter converter detected [ 563.492564][ T7] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 563.502079][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 84 [ 563.510039][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.519416][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 81 [ 563.987552][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 563.996716][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 1 [ 564.005690][ T7] usb 6-1: config 0 descriptor?? [ 564.010869][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 2 [ 564.018925][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 83 [ 564.026991][ T4295] keyspan 3-1:0.110: found no endpoint descriptor for endpoint 3 [ 564.050195][ T4295] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 564.061169][ T4295] usb 3-1: USB disconnect, device number 10 [ 564.089060][ T4295] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 564.106966][ T4295] keyspan 3-1:0.110: device disconnected [ 564.163577][ T5545] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 564.244229][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 564.359338][ T5545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.371895][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.404334][ T7] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 564.634056][ T7] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 564.649120][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.810869][ T5545] usb 2-1: config 0 has no interface number 0 [ 564.913598][ T7] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 565.239812][ T13] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 565.275332][ T5545] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 565.293230][ T7] asix: probe of 6-1:0.0 failed with error -32 [ 565.301123][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.366589][ T5545] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 565.390865][ T5545] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.406660][ T13] usb 4-1: config 0 descriptor?? [ 565.412520][ T5545] usb 2-1: config 0 interface 52 has no altsetting 0 [ 565.428870][ T4233] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 565.493305][ T5545] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 565.501730][ T8203] loop2: detected capacity change from 0 to 128 [ 565.508934][ T5545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 565.517858][ T5545] usb 2-1: SerialNumber: syz [ 565.530126][ T8203] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 565.543122][ T5545] usb 2-1: config 0 descriptor?? [ 565.548861][ T8203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.689962][ T7] usb 6-1: USB disconnect, device number 10 [ 565.798626][ T8210] loop2: detected capacity change from 0 to 256 [ 565.803978][ T5545] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 565.805235][ T4233] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 565.822196][ T5545] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 565.829350][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.829375][ T4233] usb 5-1: config 0 has no interface number 0 [ 565.829411][ T4233] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 565.829435][ T4233] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.885053][ T13] apple 0003:05AC:024B.0006: unknown main item tag 0x6 [ 565.897003][ T13] apple 0003:05AC:024B.0006: ignoring exceeding usage max [ 565.915394][ T13] apple 0003:05AC:024B.0006: invalid report_size 16640 [ 565.922353][ T13] apple 0003:05AC:024B.0006: item 0 2 1 7 parsing failed [ 565.952264][ T13] apple 0003:05AC:024B.0006: parse failed [ 565.959103][ T13] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 566.013490][ T4233] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 566.044295][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.052689][ T4233] usb 5-1: Product: syz [ 566.062464][ T4233] usb 5-1: Manufacturer: syz [ 566.068381][ T4233] usb 5-1: SerialNumber: syz [ 566.079361][ T4233] usb 5-1: config 0 descriptor?? [ 566.130413][ T13] usb 4-1: USB disconnect, device number 8 [ 566.254632][ T8223] loop5: detected capacity change from 0 to 512 [ 566.535249][ T8226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 566.544732][ T8226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 566.683746][ T8226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.917951][ T2301] usb 2-1: USB disconnect, device number 13 [ 567.413193][ T8228] loop5: detected capacity change from 0 to 4096 [ 567.473510][ T4233] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 567.499247][ T8236] loop3: detected capacity change from 0 to 2048 [ 567.509238][ T4233] usb 5-1: USB disconnect, device number 12 [ 567.587075][ T8236] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 567.613503][ T8236] UDF-fs: Scanning with blocksize 512 failed [ 567.639734][ T8239] loop4: detected capacity change from 0 to 1024 [ 567.672598][ T8236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.746417][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 568.074123][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.081309][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.623984][ T8228] EXT4-fs (loop5): Test dummy encryption mode enabled [ 568.680644][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 568.685202][ T8228] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 568.709202][ T8228] System zones: 0-5 [ 568.727065][ T8251] loop4: detected capacity change from 0 to 128 [ 568.738477][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 568.763646][ T8228] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 568.793159][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.814117][ T8251] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 568.826086][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.939426][ T8256] loop1: detected capacity change from 0 to 128 [ 569.693060][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.708738][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 569.729746][ T7] usb 3-1: SerialNumber: syz [ 570.029556][ T8228] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 570.196031][ T7] usb 3-1: 0:2 : does not exist [ 570.751222][ T7] usb 3-1: USB disconnect, device number 11 [ 570.965212][ T8273] loop4: detected capacity change from 0 to 128 [ 571.834911][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.212993][ T7358] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 572.254608][ T8281] loop1: detected capacity change from 0 to 1024 [ 572.328693][ T8281] EXT4-fs (loop1): Ignoring removed orlov option [ 572.378828][ T8281] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 572.441666][ T8281] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 572.604817][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 573.083291][ T7] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 573.100834][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.111752][ T7] usb 3-1: config 0 has no interface number 0 [ 573.125102][ T7] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 573.139440][ T7] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.243916][ T7358] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 573.260136][ T7358] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.270886][ T7358] usb 6-1: config 0 has no interface number 0 [ 573.285162][ T7358] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 573.296461][ T7358] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 573.306370][ T7358] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.319415][ T7358] usb 6-1: config 0 interface 52 has no altsetting 0 [ 573.353311][ T7] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 573.362401][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.371223][ T7] usb 3-1: Product: syz [ 573.371620][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 573.382998][ T7] usb 3-1: Manufacturer: syz [ 573.389349][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 573.400382][ T7] usb 3-1: SerialNumber: syz [ 573.409526][ T7] usb 3-1: config 0 descriptor?? [ 573.423309][ T7358] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 573.443090][ T7358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 573.456019][ T7358] usb 6-1: SerialNumber: syz [ 573.486404][ T7358] usb 6-1: config 0 descriptor?? [ 573.495951][ T8300] loop1: detected capacity change from 0 to 512 [ 573.538673][ T8300] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.953: corrupted in-inode xattr [ 573.561849][ T8300] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.953: couldn't read orphan inode 15 (err -117) [ 573.563059][ T13] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 573.582407][ T8300] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 573.690481][ T8300] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 12: comm syz.1.953: lblock 3 mapped to illegal pblock 12 (length 1) [ 573.744448][ T7358] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 573.766049][ T7358] synaptics_usb: probe of 6-1:0.52 failed with error -5 [ 573.933407][ T13] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 573.966165][ T13] usb 4-1: config 1 interface 0 has no altsetting 0 [ 574.133190][ T13] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 574.142741][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.151327][ T13] usb 4-1: Product: syz [ 574.155975][ T13] usb 4-1: Manufacturer: syz [ 574.160744][ T13] usb 4-1: SerialNumber: syz [ 574.223016][ T4246] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 574.470907][ T7358] usb 6-1: USB disconnect, device number 11 [ 574.507324][ T13] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 574.534896][ T8307] loop5: detected capacity change from 0 to 256 [ 574.565690][ T13] usb 4-1: USB disconnect, device number 9 [ 574.589798][ T8307] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 574.612760][ T8307] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 574.633336][ T4246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.660780][ T4246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.678977][ T8307] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 574.701861][ T4246] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 574.711913][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.738052][ T4246] usb 2-1: config 0 descriptor?? [ 574.869165][ T8307] exFAT-fs (loop5): abnormal access to deleted source dentry [ 575.268031][ T4246] hkems 0003:2006:0118.0007: unbalanced delimiter at end of report description [ 575.389031][ T4246] hkems 0003:2006:0118.0007: parse failed [ 575.868125][ T4246] hkems: probe of 0003:2006:0118.0007 failed with error -22 [ 575.873271][ T7] usbtouchscreen: probe of 3-1:0.117 failed with error -71 [ 575.885885][ T7] usb 3-1: USB disconnect, device number 12 [ 575.959784][ T4246] usb 2-1: USB disconnect, device number 14 [ 576.219085][ T8319] loop4: detected capacity change from 0 to 4096 [ 576.271482][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 576.279247][ T8325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 576.557311][ T8319] EXT4-fs (loop4): Test dummy encryption mode enabled [ 576.963331][ T8325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.027153][ T8319] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 577.063211][ T8319] System zones: 0-5 [ 577.125732][ T8319] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 577.139235][ T8331] loop3: detected capacity change from 0 to 1024 [ 577.298349][ T8331] EXT4-fs (loop3): Ignoring removed orlov option [ 577.324763][ T8331] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 577.443949][ T8331] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 577.720077][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 577.741769][ T8319] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 577.782182][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 578.053723][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 578.156603][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 579.497390][ T8361] loop3: detected capacity change from 0 to 256 [ 579.622718][ T8361] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 579.653005][ T8361] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 579.690667][ T8361] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 579.928250][ T8369] loop4: detected capacity change from 0 to 128 [ 580.778470][ T8370] exFAT-fs (loop3): abnormal access to deleted source dentry [ 581.117862][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 581.257649][ T8383] loop3: detected capacity change from 0 to 128 [ 581.282317][ T8383] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 581.562975][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 581.571306][ T8388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 581.628262][ T8388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.893328][ T7] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 581.949830][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.242614][ T7358] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 582.346629][ T7] usb 6-1: config 0 has no interface number 0 [ 582.352839][ T7] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 582.369523][ T7] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.593772][ T7] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 582.702337][ T7358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.846695][ T7358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.856793][ T7358] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 582.870441][ T7358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.872979][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.881288][ T7358] usb 3-1: config 0 descriptor?? [ 582.978353][ T7] usb 6-1: Product: syz [ 582.988481][ T7] usb 6-1: Manufacturer: syz [ 583.028300][ T7] usb 6-1: SerialNumber: syz [ 583.100458][ T7] usb 6-1: config 0 descriptor?? [ 583.176079][ T8401] binder: 8400:8401 ioctl c0306201 200000000080 returned -14 [ 583.209175][ T8401] binder: 8400:8401 ioctl c0306201 200000000600 returned -14 [ 583.364925][ T7358] hkems 0003:2006:0118.0008: unbalanced delimiter at end of report description [ 583.400578][ T7358] hkems 0003:2006:0118.0008: parse failed [ 583.408224][ T7358] hkems: probe of 0003:2006:0118.0008 failed with error -22 [ 583.531083][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 583.577947][ T4266] usb 3-1: USB disconnect, device number 13 [ 584.007905][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 584.063209][ T4295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 584.219901][ T8413] loop2: detected capacity change from 0 to 256 [ 584.260826][ T8413] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.312552][ T8413] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 584.384370][ T8413] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 584.503299][ T4295] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 584.511610][ T4295] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 584.561493][ T7] usbtouchscreen: probe of 6-1:0.117 failed with error -71 [ 584.605119][ T7] usb 6-1: USB disconnect, device number 12 [ 584.618569][ T4295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.658165][ T8415] exFAT-fs (loop2): abnormal access to deleted source dentry [ 584.665741][ T4295] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 584.725258][ T4295] usb 4-1: config 0 has no interface number 0 [ 585.861197][ T4295] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 585.879384][ T4295] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 585.941047][ T4295] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 585.951214][ T4295] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.971352][ T4295] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 586.138805][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.172499][ T4295] usb 4-1: config 0 descriptor?? [ 586.245359][ T4295] gspca_main: spca561-2.14.0 probing abcd:cdee [ 586.523247][ T4295] spca561: probe of 4-1:0.156 failed with error -22 [ 586.547806][ T4295] usb 4-1: MIDIStreaming interface descriptor not found [ 586.644459][ T4295] usb 4-1: USB disconnect, device number 10 [ 587.014683][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.111895][ T8433] loop2: detected capacity change from 0 to 128 [ 589.081832][ T8445] binder: 8444:8445 ioctl c0306201 200000000080 returned -14 [ 589.099201][ T8445] binder_alloc: 8444: binder_alloc_buf, no vma [ 589.108272][ T8445] binder: 8444:8445 ioctl c0306201 200000000600 returned -14 [ 590.439625][ T8462] loop1: detected capacity change from 0 to 128 [ 591.097485][ T13] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 591.513170][ T13] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 592.506923][ T13] usb 3-1: config 1 interface 0 has no altsetting 0 [ 592.613061][ T13] usb 3-1: string descriptor 0 read error: -71 [ 592.633373][ T13] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 592.688213][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.796697][ T13] usb 3-1: can't set config #1, error -71 [ 592.843292][ T13] usb 3-1: USB disconnect, device number 14 [ 593.958983][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 594.322024][ T8489] binder: 8488:8489 ioctl c0306201 200000000080 returned -14 [ 594.394652][ T8489] binder_alloc: 8488: binder_alloc_buf, no vma [ 594.417535][ T8489] binder: 8488:8489 ioctl c0306201 200000000600 returned -14 [ 594.569937][ T8493] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 595.702228][ T8508] loop1: detected capacity change from 0 to 128 [ 597.577067][ T8517] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 598.692135][ T8529] binder: 8527:8529 ioctl c0306201 200000000080 returned -14 [ 598.699903][ T8531] capability: warning: `syz.3.1020' uses 32-bit capabilities (legacy support in use) [ 598.746979][ T8524] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 598.785512][ T8524] netem: invalid attributes len -3 [ 598.794563][ T8529] binder: BINDER_SET_CONTEXT_MGR already set [ 598.825077][ T8524] netem: change failed [ 598.833355][ T8529] binder: 8527:8529 ioctl 4018620d 200000000040 returned -16 [ 598.886307][ T8529] binder: 8527:8529 ioctl c0306201 200000000600 returned -14 [ 601.332021][ T8548] loop1: detected capacity change from 0 to 40427 [ 601.346358][ T8552] loop2: detected capacity change from 0 to 128 [ 602.673167][ T8548] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 602.684146][ T8548] F2FS-fs (loop1): invalid crc value [ 602.905534][ T8548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 602.938132][ T8548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 604.559783][ T8570] loop4: detected capacity change from 0 to 128 [ 605.059699][ T8576] loop3: detected capacity change from 0 to 128 [ 606.020336][ T8581] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 606.915805][ T8581] netem: invalid attributes len -3 [ 606.920978][ T8581] netem: change failed [ 608.820002][ T8606] loop1: detected capacity change from 0 to 128 [ 609.060593][ T8604] loop5: detected capacity change from 0 to 40427 [ 609.079313][ T8604] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 609.726478][ T8604] F2FS-fs (loop5): invalid crc value [ 609.740987][ T8604] F2FS-fs (loop5): Found nat_bits in checkpoint [ 609.775629][ T8604] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 610.545461][ T8617] binder: 8616:8617 ioctl c0306201 200000000080 returned -14 [ 610.644788][ T8617] binder: 8616:8617 ioctl c0306201 200000000600 returned -14 [ 613.461413][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'. [ 614.503760][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 614.935986][ T8655] loop3: detected capacity change from 0 to 40427 [ 614.949371][ T8657] loop4: detected capacity change from 0 to 128 [ 616.325609][ T13] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 616.353364][ T8655] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 616.367417][ T8655] F2FS-fs (loop3): invalid crc value [ 616.434816][ T8655] F2FS-fs (loop3): Found nat_bits in checkpoint [ 616.468032][ T8650] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 616.481185][ T8655] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 617.272941][ T8665] binder: 8664:8665 ioctl c0306201 200000000080 returned -14 [ 617.303888][ T13] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 617.482191][ T8670] binder: 8664:8670 ioctl c0306201 200000000600 returned -14 [ 617.558686][ T13] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 618.000238][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.142296][ T13] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 618.263114][ T13] usb 6-1: config 0 has no interface number 0 [ 618.560140][ T13] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 619.931785][ T13] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 619.951913][ T13] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 619.962102][ T13] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.975577][ T13] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 619.985801][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.003948][ T13] usb 6-1: config 0 descriptor?? [ 620.033039][ T13] usb 6-1: can't set config #0, error -71 [ 620.041409][ T13] usb 6-1: USB disconnect, device number 13 [ 620.403402][ T13] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 620.478577][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 620.804339][ T13] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.990376][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 622.051674][ T13] usb 6-1: config 1 interface 0 has no altsetting 0 [ 622.193120][ T13] usb 6-1: string descriptor 0 read error: -71 [ 622.207179][ T13] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 623.143174][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.353168][ T8700] loop4: detected capacity change from 0 to 40427 [ 623.444628][ T8700] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 623.522520][ T8700] F2FS-fs (loop4): invalid crc value [ 623.575313][ T8704] loop5: detected capacity change from 0 to 128 [ 623.747965][ T13] usb 6-1: can't set config #1, error -71 [ 624.157979][ T8700] F2FS-fs (loop4): Found nat_bits in checkpoint [ 624.312983][ T13] usb 6-1: USB disconnect, device number 14 [ 624.370772][ T8700] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 624.417767][ T8714] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1071'. [ 626.126579][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 626.139520][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 626.373136][ T7] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 626.439442][ T8740] loop1: detected capacity change from 0 to 128 [ 628.223613][ T7] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.242936][ T7] usb 6-1: config 1 interface 0 has no altsetting 0 [ 628.483616][ T7] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 628.588226][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.231955][ T7] usb 6-1: Product: syz [ 629.244491][ T7] usb 6-1: Manufacturer: syz [ 629.250399][ T7] usb 6-1: SerialNumber: syz [ 629.280953][ T8761] binder: 8758:8761 ioctl c0306201 200000000080 returned -14 [ 629.344692][ T7] usb 6-1: can't set config #1, error -71 [ 629.415512][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.421977][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.463161][ T7] usb 6-1: USB disconnect, device number 15 [ 629.475529][ T8761] binder: BINDER_SET_CONTEXT_MGR already set [ 629.602540][ T8761] binder: 8758:8761 ioctl 4018620d 200000000040 returned -16 [ 629.736027][ T8769] loop1: detected capacity change from 0 to 128 [ 630.523442][ T8772] loop5: detected capacity change from 0 to 40427 [ 630.590641][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 630.611072][ T8772] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 630.778168][ T8781] loop4: detected capacity change from 0 to 128 [ 630.847694][ T8772] F2FS-fs (loop5): invalid crc value [ 632.220695][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 632.272197][ T8772] F2FS-fs (loop5): Found nat_bits in checkpoint [ 632.443193][ T8772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 633.574191][ T8792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1092'. [ 633.590932][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.602627][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.626572][ T8792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.474564][ T8792] device bridge_slave_0 left promiscuous mode [ 634.721694][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.005181][ T8792] device bridge_slave_1 left promiscuous mode [ 636.011381][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.250423][ T8812] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1098'. [ 636.264011][ T8792] bond0: (slave bond_slave_0): Releasing backup interface [ 636.377314][ T8818] loop5: detected capacity change from 0 to 128 [ 636.733615][ T8792] bond0: (slave bond_slave_1): Releasing backup interface [ 636.857214][ T8792] team0: Port device team_slave_0 removed [ 637.015860][ T8825] binder: 8824:8825 ioctl c0306201 200000000080 returned -14 [ 637.050787][ T8792] team0: Port device team_slave_1 removed [ 637.074045][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.118889][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.127561][ T8825] binder: BINDER_SET_CONTEXT_MGR already set [ 637.158891][ T8825] binder: 8824:8825 ioctl 4018620d 200000000040 returned -16 [ 637.214757][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.222256][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.389826][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 637.401389][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 638.468783][ T8846] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1107'. [ 641.917455][ T8867] loop3: detected capacity change from 0 to 128 [ 641.955440][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 641.969944][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 642.019758][ T8871] binder: 8869:8871 ioctl c0306201 200000000600 returned -14 [ 647.074837][ T8914] loop5: detected capacity change from 0 to 40427 [ 648.157847][ T8914] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 648.193427][ T8914] F2FS-fs (loop5): invalid crc value [ 648.242496][ T8914] F2FS-fs (loop5): Found nat_bits in checkpoint [ 648.300231][ T8914] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 648.317924][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 648.927434][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 650.111143][ T8936] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1132'. [ 650.165218][ T8946] loop5: detected capacity change from 0 to 128 [ 651.270546][ T8956] loop4: detected capacity change from 0 to 128 [ 652.933140][ T7598] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 653.455322][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 653.476974][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 653.806370][ T8975] loop2: detected capacity change from 0 to 40427 [ 653.893021][ T1111] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 653.913269][ T8975] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 653.924490][ T8975] F2FS-fs (loop2): invalid crc value [ 653.939613][ T8975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 653.984005][ T8975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 654.648894][ T7598] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 654.659243][ T7598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.667448][ T7598] usb 6-1: Product: syz [ 654.671850][ T7598] usb 6-1: Manufacturer: syz [ 654.676676][ T7598] usb 6-1: SerialNumber: syz [ 654.724094][ T7598] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 654.983187][ T1111] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 654.993230][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.002072][ T1111] usb 5-1: Product: syz [ 655.020840][ T1111] usb 5-1: Manufacturer: syz [ 655.025675][ T1111] usb 5-1: SerialNumber: syz [ 655.183154][ T1111] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 655.338366][ T7] usb 6-1: USB disconnect, device number 16 [ 655.353328][ T7598] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 655.395599][ T7] usb 6-1: ath9k_htc: USB layer deinitialized [ 656.365963][ T8994] loop5: detected capacity change from 0 to 128 [ 659.333165][ T1111] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 659.423961][ T8999] loop2: detected capacity change from 0 to 128 [ 659.458962][ T1111] usb 5-1: ath9k_htc: USB layer deinitialized [ 659.570948][ T7598] usb 5-1: USB disconnect, device number 13 [ 662.527289][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 663.203142][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 664.442990][ T7598] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 664.443643][ T9027] loop2: detected capacity change from 0 to 40427 [ 664.462357][ T9027] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 664.472543][ T9027] F2FS-fs (loop2): invalid crc value [ 664.509529][ T9027] F2FS-fs (loop2): Found nat_bits in checkpoint [ 665.132184][ T9027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 665.585386][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 665.603591][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 670.993588][ T7598] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 671.069437][ T7598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.260008][ T7598] usb 2-1: Product: syz [ 672.383476][ T7598] usb 2-1: Manufacturer: syz [ 672.403028][ T7598] usb 2-1: can't set config #1, error -71 [ 672.410487][ T7598] usb 2-1: USB disconnect, device number 15 [ 672.700954][ T9065] loop5: detected capacity change from 0 to 128 [ 672.925625][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1166'. [ 674.445462][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 674.533248][ T7598] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 674.544730][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 674.742973][ T7598] usb 2-1: device descriptor read/64, error -71 [ 675.762949][ T7598] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 782.142821][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 782.149876][ C0] (detected by 0, t=10502 jiffies, g=36313, q=141) [ 782.156492][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10387 (4295015337-4295004950), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 782.169881][ C0] rcu: rcu_preempt kthread starved for 10387 jiffies! g36313 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 782.181112][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 782.191108][ C0] rcu: RCU grace-period kthread stack dump: [ 782.197101][ C0] task:rcu_preempt state:R running task stack:27464 pid: 15 ppid: 2 flags:0x00004000 [ 782.207922][ C0] Call Trace: [ 782.211232][ C0] [ 782.214196][ C0] __schedule+0x11b8/0x43b0 [ 782.218777][ C0] ? release_firmware_map_entry+0x190/0x190 [ 782.224715][ C0] schedule+0x11b/0x1e0 [ 782.228908][ C0] schedule_timeout+0x15c/0x280 [ 782.233786][ C0] ? console_conditional_schedule+0x40/0x40 [ 782.239700][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 782.245627][ C0] ? update_process_times+0x200/0x200 [ 782.251038][ C0] ? prepare_to_swait_event+0x331/0x350 [ 782.256618][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 782.261513][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 782.267696][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 782.272494][ C0] ? finish_swait+0xc0/0x1d0 [ 782.277117][ C0] rcu_gp_kthread+0x98/0x350 [ 782.281740][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 782.286880][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 782.292820][ C0] ? __kthread_parkme+0x157/0x1b0 [ 782.297880][ C0] kthread+0x436/0x520 [ 782.301981][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 782.307119][ C0] ? kthread_blkcg+0xd0/0xd0 [ 782.311737][ C0] ret_from_fork+0x1f/0x30 [ 782.316197][ C0] [ 782.319237][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 782.325589][ C0] NMI backtrace for cpu 0 [ 782.329933][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.186-syzkaller #0 [ 782.337760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 782.347833][ C0] Call Trace: [ 782.351222][ C0] [ 782.354087][ C0] dump_stack_lvl+0x168/0x230 [ 782.358803][ C0] ? show_regs_print_info+0x20/0x20 [ 782.364028][ C0] ? load_image+0x3b0/0x3b0 [ 782.368651][ C0] ? irq_work_queue+0xbf/0x140 [ 782.373442][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 782.378499][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 782.384674][ C0] ? _printk+0xcc/0x110 [ 782.388855][ C0] ? cpu_online+0x1d/0x30 [ 782.393220][ C0] ? load_image+0x3b0/0x3b0 [ 782.397748][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 782.403846][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 782.409864][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 782.416055][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 782.421546][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 782.426510][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 782.431897][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 782.436975][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 782.442208][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 782.447087][ C0] ? account_process_tick+0x227/0x3a0 [ 782.452494][ C0] update_process_times+0x193/0x200 [ 782.457759][ C0] tick_sched_timer+0x37d/0x560 [ 782.462643][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 782.467886][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 782.473478][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 782.478619][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 782.484804][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 782.489794][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 782.495807][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 782.501471][ C0] [ 782.504427][ C0] [ 782.507386][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 782.513426][ C0] RIP: 0010:default_idle+0xb/0x10 [ 782.518484][ C0] Code: bf 48 89 df e8 06 6f 0a f8 eb b5 e8 df af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 f4 52 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 782.538118][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 782.544227][ C0] RAX: 83e873c0eef5f100 RBX: ffffffff8bebc3c0 RCX: 83e873c0eef5f100 [ 782.552223][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b11c0 RDI: ffffffff8a59ab80 [ 782.560215][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed101720765a [ 782.568412][ C0] R10: ffffed101720765a R11: 1ffff11017207659 R12: ffffffff8d697ba8 [ 782.576408][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 782.584420][ C0] default_idle_call+0x81/0xc0 [ 782.589218][ C0] do_idle+0x21b/0x5b0 [ 782.593330][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 782.598565][ C0] ? do_idle+0x6/0x5b0 [ 782.602683][ C0] cpu_startup_entry+0x14/0x20 [ 782.607477][ C0] ? time_init+0x40/0x40 [ 782.611742][ C0] start_kernel+0x486/0x530 [ 782.616280][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 782.622211][ C0] [ 782.625336][ C0] vkms_vblank_simulate: vblank timer overrun